From dc0a4eb58f6276272fbc61c93e23f4d7aebb8eed Mon Sep 17 00:00:00 2001
From: ginnoir <ginnoir@users.noreply.github.com>
Date: Sat, 6 Jun 2026 20:53:19 -0500
Subject: [PATCH] revert(caddy): drop RomM empty-Bearer workaround

decky-romm-sync has completed its first-run token mint, so the
Authorization: Bearer (empty token) probe that crashed RomM 4.8.x no
longer occurs. Collapse roms.ginnoir.com back to a plain reverse_proxy.
---
 Caddyfile | 20 +-------------------
 1 file changed, 1 insertion(+), 19 deletions(-)

diff --git a/Caddyfile b/Caddyfile
index c073064..7f330d7 100644
--- a/Caddyfile
+++ b/Caddyfile
@@ -122,25 +122,7 @@ stash.ginnoir.com {
 # GAMES / ROMS — public (temporarily; RomM has its own auth)
 # =============================================================
 roms.ginnoir.com {
-	# WORKAROUND (2026-06-06): RomM 4.8.x 500s on a malformed Authorization
-	# header — hybrid_auth.py does `scheme, token = header.split()` with no
-	# guard, so a value with !=2 space-separated parts raises ValueError.
-	# decky-romm-sync >=0.20.0 sends `Authorization: Bearer ` (empty token) on
-	# its first-run probes, before it has minted a Client API Token, which trips
-	# that crash and deadlocks setup (heartbeat/platforms/devices all 500).
-	# Strip the empty-token header so the heartbeat probe returns 200 and the
-	# Basic-auth token mint (POST /api/client-tokens) can run. Real `Bearer
-	# rmm_…` tokens and browser session-cookie auth are unaffected. Remove once
-	# the plugin omits the empty header (or RomM guards the split).
-	@romm_empty_bearer header_regexp Authorization "^Bearer\s*$"
-	handle @romm_empty_bearer {
-		reverse_proxy romm:8080 {
-			header_up -Authorization
-		}
-	}
-	handle {
-		reverse_proxy romm:8080
-	}
+	reverse_proxy romm:8080
 }
 
 # =============================================================