openssl passwd -apr1 produces inconsistent output in nginx:alpine.
Switch to htpasswd from apache2-utils which is the standard tool.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
A custom entrypoint generates /etc/nginx/.htpasswd at container startup
from AUTH_USER and AUTH_PASSWORD env vars (via openssl). No credentials
are baked into the image. Pass AUTH_USER and AUTH_PASSWORD in docker-compose.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>