From 758df0625ae2521413154c5b75caa2207893cecd Mon Sep 17 00:00:00 2001
From: Ian Keane <ian@keane.sh>
Date: Sat, 22 Aug 2026 18:53:31 -0400
Subject: [PATCH] fix: inject forgejo-mcp API key as proxy bearer token

---
 charts/mcp-auth-proxy/templates/mcp-auth-proxy-git.yaml | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/charts/mcp-auth-proxy/templates/mcp-auth-proxy-git.yaml b/charts/mcp-auth-proxy/templates/mcp-auth-proxy-git.yaml
index 036e3df..ea00f66 100644
--- a/charts/mcp-auth-proxy/templates/mcp-auth-proxy-git.yaml
+++ b/charts/mcp-auth-proxy/templates/mcp-auth-proxy-git.yaml
@@ -22,11 +22,16 @@ spec:
             - --external-url=https://git-mcp-oauth.dumpnet.chat
             - --no-auto-tls=true
             - --listen=:8080
-            - --proxy-forward-authorization=true
+            - --proxy-bearer-token=$(FORGEJO_MCP_API_KEY)
             - http://forgejo-mcp.mcp.svc.cluster.local
           env:
             - name: DATA_PATH
               value: /data
+            - name: FORGEJO_MCP_API_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: forgejo-mcp-secrets
+                  key: FORGEJO_MCP_API_KEY
           envFrom:
             - secretRef:
                 name: mcp-auth-proxy-secrets