From 897a54859c86633e6178979b5355b8c3f740da51 Mon Sep 17 00:00:00 2001
From: CI <ci@bryanmail.net>
Date: Sat, 27 Jun 2026 07:28:40 -0700
Subject: [PATCH] refactor(.woodpecker.yml): move traefik to no-op provision
 case (Pattern B), remove TRAEFIK_KEEPALIVED_PASSWORD env var

---
 .woodpecker.yml | 7 +------
 1 file changed, 1 insertion(+), 6 deletions(-)

diff --git a/.woodpecker.yml b/.woodpecker.yml
index 1f193ad..ddf9870 100644
--- a/.woodpecker.yml
+++ b/.woodpecker.yml
@@ -57,8 +57,6 @@ steps:
         from_secret: productivity_db_password
       PRODUCTIVITY_OIDC_PROVIDERS:
         from_secret: productivity_oidc_providers
-      TRAEFIK_KEEPALIVED_PASSWORD:
-        from_secret: traefik_keepalived_password
       VAULTWARDEN_ADMIN_TOKEN:
         from_secret: vaultwarden_admin_token
       VAULTWARDEN_DATABASE_URL:
@@ -115,7 +113,7 @@ steps:
           STACK=$(basename "$f" .yaml)
           echo "Provisioning: $STACK"
           case "$STACK" in
-            maintenance|media|unifi|guacamole|security|auth)
+            maintenance|media|unifi|guacamole|security|auth|traefik)
               echo "  No Docker secrets for $STACK — secrets in host .env";;
             woodpecker)
               echo "  Manual only - skipping";;
@@ -149,9 +147,6 @@ steps:
               ssh -o StrictHostKeyChecking=no root@${SWARM_MANAGER_IP} "source /tmp/cs.sh
                 create_or_update_secret 'postgresql_password'         '${POSTGRESQL_PASSWORD}'
                 create_or_update_secret 'postgresql_pgadmin_password' '${POSTGRESQL_PGADMIN_PASSWORD}'";;
-            traefik)
-              ssh -o StrictHostKeyChecking=no root@${SWARM_MANAGER_IP} "source /tmp/cs.sh
-                create_or_update_secret 'traefik_keepalived_password' '${TRAEFIK_KEEPALIVED_PASSWORD}'";;
             productivity)
               ssh -o StrictHostKeyChecking=no root@${SWARM_MANAGER_IP} "source /tmp/cs.sh
                 create_or_update_secret 'productivity_paperless_secret_key' '${PRODUCTIVITY_PAPERLESS_SECRET_KEY}'