# Install on the proxy inside `http { ... }` (before any server that uses $ia_enso_ollama_authorized):
#   include /etc/nginx/http-maps/ia-enso-ollama-bearer.map.conf;
#
# Copy this file without the .example suffix, set a long random Bearer secret (ASCII, no double quotes).
# Cursor / OpenAI-compatible clients: Base URL .../ollama/v1 and API Key = same secret (no "Bearer " prefix).
#
# Required for long Bearer strings (e.g. hex tokens); omit only if nginx already sets this in http {}.

map_hash_bucket_size 256;

map $http_authorization $ia_enso_ollama_authorized {
    default 0;
    "Bearer CHANGE_ME_TO_LONG_RANDOM_SECRET" 1;
}