From c16b0f226070f744248fca0783a1461bb95f6a12 Mon Sep 17 00:00:00 2001
From: chahinebrini <chahinebrini@gmail.com>
Date: Tue, 2 Jun 2026 10:31:03 +0200
Subject: [PATCH] feat(magic): map ADGUARD_* secrets to NITRO runtime config in
 start-staging

Adds NITRO_ADGUARD_BASE_URL / NITRO_ADGUARD_USER / NITRO_ADGUARD_PASSWORD
exports so Nitro runtimeConfig picks up the AdGuard admin credentials at
runtime. Required for /api/magic/register to provision DoH clients on
dns.rebreak.org.
---
 backend/start-staging.sh | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/backend/start-staging.sh b/backend/start-staging.sh
index 30ab7d2..6c270b7 100755
--- a/backend/start-staging.sh
+++ b/backend/start-staging.sh
@@ -75,6 +75,9 @@ exec infisical run \
     [[ -n "${BREVO_API_KEY:-}" ]] && export NITRO_BREVO_API_KEY="$BREVO_API_KEY"
     [[ -n "${HOOK_SEND_EMAIL_SECRETS:-}" ]] && export NITRO_HOOK_SEND_EMAIL_SECRETS="$HOOK_SEND_EMAIL_SECRETS"
     [[ -n "${MAIL_SENDER_EMAIL:-}" ]] && export NITRO_MAIL_SENDER_EMAIL="$MAIL_SENDER_EMAIL"
+    [[ -n "${ADGUARD_BASE_URL:-}" ]] && export NITRO_ADGUARD_BASE_URL="$ADGUARD_BASE_URL"
+    [[ -n "${ADGUARD_USER:-}" ]] && export NITRO_ADGUARD_USER="$ADGUARD_USER"
+    [[ -n "${ADGUARD_PASSWORD:-}" ]] && export NITRO_ADGUARD_PASSWORD="$ADGUARD_PASSWORD"
 
     exec '"$NODE_BIN"' '"$INDEX_MJS"'
   '