From 1facaf44f02acf43d4ba735ca8c141dc59f82368 Mon Sep 17 00:00:00 2001
From: miloschwartz <mschwartz10612@gmail.com>
Date: Mon, 29 Dec 2025 10:20:57 -0500
Subject: [PATCH] add missing badger middlwares

---
 self-host/advanced/integration-api.mdx |  1 +
 self-host/manual/docker-compose.mdx    | 11 +++++++++++
 self-host/manual/unraid.mdx            | 11 +++++++++++
 3 files changed, 23 insertions(+)

diff --git a/self-host/advanced/integration-api.mdx b/self-host/advanced/integration-api.mdx
index 207707d..b804467 100644
--- a/self-host/advanced/integration-api.mdx
+++ b/self-host/advanced/integration-api.mdx
@@ -35,6 +35,7 @@ Add the following configuration to your `config/traefik/dynamic_config.yml` to e
         - web
       middlewares:
         - redirect-to-https
+	- badger # If you have Badger >=1.3.0 and it's enabled in the middlewares section of the dynamic config
 
     int-api-router:
       rule: "Host(`api.example.com`)"
diff --git a/self-host/manual/docker-compose.mdx b/self-host/manual/docker-compose.mdx
index 9954d1a..ae6ed4f 100644
--- a/self-host/manual/docker-compose.mdx
+++ b/self-host/manual/docker-compose.mdx
@@ -254,6 +254,10 @@ Create `config/traefik/dynamic_config.yml`:
 ```yaml title="config/traefik/dynamic_config.yml"
 http:
   middlewares:
+    badger:
+      plugin:
+        badger:
+          disableForwardAuth: true
     redirect-to-https:
       redirectScheme:
         scheme: https
@@ -267,6 +271,7 @@ http:
         - web
       middlewares:
         - redirect-to-https
+	- badger
 
     # Next.js router (handles everything except API and WebSocket paths)
     next-router:
@@ -274,6 +279,8 @@ http:
       service: next-service
       entryPoints:
         - websecure
+      middlewares:
+        - badger
       tls:
         certResolver: letsencrypt
 
@@ -283,6 +290,8 @@ http:
       service: api-service
       entryPoints:
         - websecure
+      middlewares:
+        - badger
       tls:
         certResolver: letsencrypt
 
@@ -292,6 +301,8 @@ http:
       service: api-service
       entryPoints:
         - websecure
+      middlewares:
+        - badger
       tls:
         certResolver: letsencrypt
 
diff --git a/self-host/manual/unraid.mdx b/self-host/manual/unraid.mdx
index 79e29f1..61e8b37 100644
--- a/self-host/manual/unraid.mdx
+++ b/self-host/manual/unraid.mdx
@@ -170,6 +170,10 @@ The domain you enter here is what will be used to access the main Pangolin dashb
 ```yaml title="pangolin/config/traefik/dynamic_config.yml"
 http:
   middlewares:
+    badger:
+      plugin:
+        badger:
+          disableForwardAuth: true
     redirect-to-https:
       redirectScheme:
         scheme: https
@@ -183,6 +187,7 @@ http:
         - web
       middlewares:
         - redirect-to-https
+	- badger
 
     # Next.js router (handles everything except API and WebSocket paths)
     next-router:
@@ -190,6 +195,8 @@ http:
       service: next-service
       entryPoints:
         - websecure
+      middlewares:
+        - badger
       tls:
         certResolver: letsencrypt
 
@@ -199,6 +206,8 @@ http:
       service: api-service
       entryPoints:
         - websecure
+      middlewares:
+        - badger
       tls:
         certResolver: letsencrypt
 
@@ -208,6 +217,8 @@ http:
       service: api-service
       entryPoints:
         - websecure
+      middlewares:
+        - badger
       tls:
         certResolver: letsencrypt