From a205a9ece1f1799bdd657a04c27a99a0f593c6b4 Mon Sep 17 00:00:00 2001
From: Marc Mintel <marc@mintel.me>
Date: Sun, 8 Feb 2026 18:31:41 +0100
Subject: [PATCH] fix: deploy

---
 .gitea/workflows/deploy.yml |  2 +-
 docker-compose.yml          | 10 +++++-----
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index d954a37..34389ca 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -140,7 +140,7 @@ jobs:
           if [[ "$TARGET" == "production" ]]; then
             echo "auth_middleware=compress" >> "$GITHUB_OUTPUT"
           else
-            echo "auth_middleware=$PRJ_ID-$TARGET-auth,compress" >> "$GITHUB_OUTPUT"
+            echo "auth_middleware=$PRJ_ID-$TARGET-auth" >> "$GITHUB_OUTPUT"
           fi
 
   qa:
diff --git a/docker-compose.yml b/docker-compose.yml
index 4f0655b..8ea5818 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -8,22 +8,22 @@ services:
       - ${ENV_FILE:-.env}
     labels:
       - "traefik.enable=true"
-      - "traefik.http.routers.${PROJECT_NAME}.rule=Host(`${TRAEFIK_HOST}`)"
+      - "traefik.http.routers.${PROJECT_NAME}.rule=${TRAEFIK_RULE}"
       - "traefik.http.routers.${PROJECT_NAME}.entrypoints=websecure"
       - "traefik.http.routers.${PROJECT_NAME}.tls.certresolver=le"
       - "traefik.http.routers.${PROJECT_NAME}.tls=true"
       - "traefik.http.services.${PROJECT_NAME}.loadbalancer.server.port=3000"
-      - "traefik.http.routers.${PROJECT_NAME}.middlewares=${AUTH_MIDDLEWARE:-compress}"
+      - "traefik.http.routers.${PROJECT_NAME}.middlewares=${AUTH_MIDDLEWARE}"
       - "traefik.docker.network=infra"
 
       # Gatekeeper Router
-      - "traefik.http.routers.${PROJECT_NAME}-gatekeeper.rule=Host(`${TRAEFIK_HOST}`) && PathPrefix(`/gatekeeper`)"
+      - "traefik.http.routers.${PROJECT_NAME}-gatekeeper.rule=${GATEKEEPER_RULE}"
       - "traefik.http.routers.${PROJECT_NAME}-gatekeeper.entrypoints=websecure"
       - "traefik.http.routers.${PROJECT_NAME}-gatekeeper.tls.certresolver=le"
       - "traefik.http.routers.${PROJECT_NAME}-gatekeeper.tls=true"
       - "traefik.http.routers.${PROJECT_NAME}-gatekeeper.service=${PROJECT_NAME}-gatekeeper"
 
-      - "traefik.http.middlewares.${PROJECT_NAME}-auth.forwardauth.address=http://${PROJECT_NAME}-gatekeeper:3000/gatekeeper/api/verify"
+      - "traefik.http.middlewares.${PROJECT_NAME}-auth.forwardauth.address=http://${PROJECT_NAME}-gatekeeper:3000/api/verify"
       - "traefik.http.middlewares.${PROJECT_NAME}-auth.forwardauth.trustForwardHeader=true"
       - "traefik.http.middlewares.${PROJECT_NAME}-auth.forwardauth.authResponseHeaders=X-Auth-User"
       - "traefik.docker.network=infra"
@@ -78,7 +78,7 @@ services:
       - "traefik.http.routers.${PROJECT_NAME}-directus.entrypoints=websecure"
       - "traefik.http.routers.${PROJECT_NAME}-directus.tls.certresolver=le"
       - "traefik.http.routers.${PROJECT_NAME}-directus.tls=true"
-      - "traefik.http.routers.${PROJECT_NAME}-directus.middlewares=${AUTH_MIDDLEWARE:-compress}"
+      - "traefik.http.routers.${PROJECT_NAME}-directus.middlewares=${AUTH_MIDDLEWARE}"
       - "traefik.http.services.${PROJECT_NAME}-directus.loadbalancer.server.port=8055"
       - "traefik.docker.network=infra"