From 25628a6651faedc31edf17815a53b8cee04e08b5 Mon Sep 17 00:00:00 2001
From: Brad Schroth <2342157+bferd@users.noreply.github.com>
Date: Mon, 19 Oct 2026 09:47:22 -0400
Subject: [PATCH] feat(mealie): add reverse proxy auth settings to mealie.env
 (#18006)

* feat(mealie): add reverse proxy auth settings to mealie.env

* fix(mealie): remove run-time note, documented on website instead

* fix(mealie): use plain EOF heredoc delimiter
---
 ct/mealie.sh              | 12 ++++++++++++
 install/mealie-install.sh |  8 ++++++++
 2 files changed, 20 insertions(+)

diff --git a/ct/mealie.sh b/ct/mealie.sh
index f7a1b941e..d2ee5dae8 100644
--- a/ct/mealie.sh
+++ b/ct/mealie.sh
@@ -58,6 +58,18 @@ exec uv run mealie
 STARTEOF
     fi
     chmod +x /opt/mealie/start.sh
+    if ! grep -q "REVERSE_PROXY_AUTH_ENABLED" /opt/mealie/mealie.env; then
+      cat <<EOF >>/opt/mealie/mealie.env
+
+# Reverse proxy auth (Mealie v3.29.0+). Disabled by default.
+# To enable: set REVERSE_PROXY_AUTH_ENABLED=true, set a secret, then restart mealie.
+# REVERSE_PROXY_AUTH_ENABLED=false
+# REVERSE_PROXY_AUTH_HEADER=X-Forwarded-User
+# REVERSE_PROXY_AUTH_SIGNUP_ENABLED=false
+# REVERSE_PROXY_AUTH_SECRET=
+# REVERSE_PROXY_AUTH_SECRET_HEADER=X-Mealie-Reverse-Proxy-Secret
+EOF
+    fi
     msg_ok "Configuration restored"
 
     msg_info "Installing Python Dependencies with uv"
diff --git a/install/mealie-install.sh b/install/mealie-install.sh
index 6aa57d452..6fdb5995f 100644
--- a/install/mealie-install.sh
+++ b/install/mealie-install.sh
@@ -98,6 +98,14 @@ PRODUCTION=true
 HOST=0.0.0.0
 PORT=9000
 BASE_URL=http://${LOCAL_IP}:9000
+
+# Reverse proxy auth (Mealie v3.29.0+). Disabled by default.
+# To enable: set REVERSE_PROXY_AUTH_ENABLED=true, set a secret, then restart mealie.
+# REVERSE_PROXY_AUTH_ENABLED=false
+# REVERSE_PROXY_AUTH_HEADER=X-Forwarded-User
+# REVERSE_PROXY_AUTH_SIGNUP_ENABLED=false
+# REVERSE_PROXY_AUTH_SECRET=
+# REVERSE_PROXY_AUTH_SECRET_HEADER=X-Mealie-Reverse-Proxy-Secret
 EOF
 msg_ok "Wrote Environment File"