From 93be40a7c00ed45127fa0e956666190022ee564a Mon Sep 17 00:00:00 2001
From: Solaris-star <820622658@qq.com>
Date: Sun, 26 Jul 2026 12:40:29 +0800
Subject: [PATCH] ntfy: protect exposed metrics with global basic auth

Signed-off-by: Solaris-star <820622658@qq.com>
---
 group_vars/matrix_servers | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/group_vars/matrix_servers b/group_vars/matrix_servers
index 1664047b6..1d1dd4771 100755
--- a/group_vars/matrix_servers
+++ b/group_vars/matrix_servers
@@ -4407,6 +4407,8 @@ ntfy_container_labels_traefik_enabled: "{{ matrix_playbook_traefik_labels_enable
 ntfy_container_labels_traefik_docker_network: "{{ matrix_playbook_reverse_proxyable_services_additional_network }}"
 ntfy_container_labels_traefik_entrypoints: "{{ traefik_entrypoint_primary }}"
 ntfy_container_labels_traefik_tls_certResolver: "{{ traefik_certResolver_primary }}"
+ntfy_container_labels_traefik_metrics_middleware_basic_auth_enabled: "{{ matrix_metrics_exposure_http_basic_auth_enabled }}"
+ntfy_container_labels_traefik_metrics_middleware_basic_auth_users: "{{ matrix_metrics_exposure_http_basic_auth_users }}"
 
 ntfy_visitor_request_limit_exempt_hosts_hostnames_auto: |
   {{