From 8d67ba781014592191eed6a1270fb3ef8470cbf4 Mon Sep 17 00:00:00 2001
From: mac <mac@macdeMacBook-Pro.local>
Date: Wed, 15 Jul 2026 11:44:21 +0800
Subject: [PATCH] fix(auth): limit nginx template envsubst

---
 authserver/k8s/nginx.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/authserver/k8s/nginx.yaml b/authserver/k8s/nginx.yaml
index fae0081..cc5c601 100644
--- a/authserver/k8s/nginx.yaml
+++ b/authserver/k8s/nginx.yaml
@@ -105,6 +105,8 @@ spec:
           ports:
             - containerPort: 80
           env:
+            - name: NGINX_ENVSUBST_FILTER
+              value: "^(AUTHSERVER_BACKEND_UPSTREAM|CLOUDDM_UPSTREAM|CLOUDDM_PUBLIC_HOST)$"
             - name: AUTHSERVER_BACKEND_UPSTREAM
               value: http://authserver-backend:8083
             - name: CLOUDDM_UPSTREAM