# Bearer gate for /ollama/ (matches default site: if ($ia_enso_ollama_authorized = 0) { return 401; }).
# Install inside `http { ... }` before server blocks that use $ia_enso_ollama_authorized:
#   include /etc/nginx/http-maps/ia-enso-ollama-bearer.map.conf;
#
# Copy without the .example suffix; set secret (ASCII, no double quotes in value).
# Cursor: OpenAI base .../ollama/v1 and API key = same secret (no "Bearer " in field).

map_hash_bucket_size 256;

map $http_authorization $ia_enso_ollama_authorized {
    default 0;
    "Bearer CHANGE_ME_TO_LONG_RANDOM_SECRET" 1;
}