- Update oauth2-proxy with working GitHub OAuth config
- Add OAUTH2_PROXY_SCOPE=user for proper user info retrieval
- Add OAUTH2_PROXY_UPSTREAMS to proxy staging traffic
- Route staging.domain through oauth2-proxy
- Set *.staging DNS to non-proxied for Let's Encrypt SSL
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Go regexp doesn't support negative lookahead (?!...).
Use proper anchored regex with escaped dots.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Using file() instead of templatefile() so $${VAR} isn't processed.
Changed to ${VAR} for proper docker-compose variable interpolation.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
