From 64ff262d75396644104b2e5dcb5963ea2f3af875 Mon Sep 17 00:00:00 2001
From: Marc Mintel <marc@mintel.me>
Date: Thu, 12 Feb 2026 18:22:30 +0100
Subject: [PATCH] fix(infra): align gatekeeper config with infrastructure
 standards and fix middleware env var

---
 .gitea/workflows/deploy.yml | 2 +-
 docker-compose.yml          | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index f2c79a5..29339ed 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -313,7 +313,7 @@ jobs:
           TRAEFIK_RULE='$TRAEFIK_RULE'
           TRAEFIK_HOST='$TRAEFIK_HOST'
           COMPOSE_PROFILES=$COMPOSE_PROFILES
-          AUTH_MIDDLEWARE=$AUTH_MIDDLEWARE
+          TRAEFIK_MIDDLEWARES=$AUTH_MIDDLEWARE
           EOF
 
       - name: 🚀 SSH Deploy
diff --git a/docker-compose.yml b/docker-compose.yml
index d4f4ed9..91004ba 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -25,7 +25,7 @@ services:
 
       - "traefik.http.middlewares.${PROJECT_NAME}-auth.forwardauth.address=http://${PROJECT_NAME}-gatekeeper:3000/gatekeeper/api/verify"
       - "traefik.http.middlewares.${PROJECT_NAME}-auth.forwardauth.trustForwardHeader=true"
-      - "traefik.http.middlewares.${PROJECT_NAME}-auth.forwardauth.authRequestHeaders=X-Forwarded-Host,X-Forwarded-Proto,X-Forwarded-For"
+      - "traefik.http.middlewares.${PROJECT_NAME}-auth.forwardauth.authRequestHeaders=X-Forwarded-Host,X-Forwarded-Proto,X-Forwarded-For,Cookie"
       - "traefik.http.middlewares.${PROJECT_NAME}-auth.forwardauth.authResponseHeaders=X-Auth-User"
       - "traefik.docker.network=infra"