From 8cd24bae109ff6bcf9612caac3312b3a0738f6d9 Mon Sep 17 00:00:00 2001
From: root <melabidi@alrahmaisgl.org>
Date: Thu, 13 Aug 2026 00:02:32 -0400
Subject: [PATCH] fix admin api

---
 docker-compose.production.yml            | 8 ++++++++
 production/docker-compose.production.yml | 8 ++++++++
 2 files changed, 16 insertions(+)

diff --git a/docker-compose.production.yml b/docker-compose.production.yml
index 99b546d..ba1702a 100644
--- a/docker-compose.production.yml
+++ b/docker-compose.production.yml
@@ -136,6 +136,14 @@ services:
       - traefik.http.routers.dashboard-socket.priority=30
       - traefik.http.routers.dashboard-socket.middlewares=dashboard-socket-strip@docker,rdg-security-headers@docker
       - traefik.http.middlewares.dashboard-socket-strip.stripprefix.prefixes=/dashboard
+      - traefik.http.routers.admin-api.rule=(Host(`${PUBLIC_SITE_DOMAIN}`) || Host(`www.${PUBLIC_SITE_DOMAIN}`)) && PathPrefix(`/admin/api`) && !HeaderRegexp(`x-middleware-subrequest`, `.+`)
+      - traefik.http.routers.admin-api.entrypoints=websecure
+      - traefik.http.routers.admin-api.tls=true
+      - traefik.http.routers.admin-api.tls.certresolver=letsencrypt
+      - traefik.http.routers.admin-api.service=api
+      - traefik.http.routers.admin-api.priority=50
+      - traefik.http.routers.admin-api.middlewares=admin-api-strip@docker,rdg-security-headers@docker
+      - traefik.http.middlewares.admin-api-strip.stripprefix.prefixes=/admin
       - traefik.http.middlewares.rdg-security-headers.headers.stsSeconds=31536000
       - traefik.http.middlewares.rdg-security-headers.headers.stsIncludeSubdomains=true
       - traefik.http.middlewares.rdg-security-headers.headers.contentTypeNosniff=true
diff --git a/production/docker-compose.production.yml b/production/docker-compose.production.yml
index 99b546d..ba1702a 100644
--- a/production/docker-compose.production.yml
+++ b/production/docker-compose.production.yml
@@ -136,6 +136,14 @@ services:
       - traefik.http.routers.dashboard-socket.priority=30
       - traefik.http.routers.dashboard-socket.middlewares=dashboard-socket-strip@docker,rdg-security-headers@docker
       - traefik.http.middlewares.dashboard-socket-strip.stripprefix.prefixes=/dashboard
+      - traefik.http.routers.admin-api.rule=(Host(`${PUBLIC_SITE_DOMAIN}`) || Host(`www.${PUBLIC_SITE_DOMAIN}`)) && PathPrefix(`/admin/api`) && !HeaderRegexp(`x-middleware-subrequest`, `.+`)
+      - traefik.http.routers.admin-api.entrypoints=websecure
+      - traefik.http.routers.admin-api.tls=true
+      - traefik.http.routers.admin-api.tls.certresolver=letsencrypt
+      - traefik.http.routers.admin-api.service=api
+      - traefik.http.routers.admin-api.priority=50
+      - traefik.http.routers.admin-api.middlewares=admin-api-strip@docker,rdg-security-headers@docker
+      - traefik.http.middlewares.admin-api-strip.stripprefix.prefixes=/admin
       - traefik.http.middlewares.rdg-security-headers.headers.stsSeconds=31536000
       - traefik.http.middlewares.rdg-security-headers.headers.stsIncludeSubdomains=true
       - traefik.http.middlewares.rdg-security-headers.headers.contentTypeNosniff=true