CouchDB allows proxy authentication which enables another server to provide the necessary authentication information. In this Docker container, both proxy and ‘normal’ authentication are enabled. Proxy authentication is only used by internal daemons (e.g. the aggregate and update daemons) as well as the File Server for providing privileged access.
local.ini
The relevant settings are:
[httpd]
authentication_handlers = ..., {couch_httpd_auth, proxy_authentication_handler},...
[couch_httpd_auth]
secret = @SECRETREPLACE@
proxy_use_secret = true
secret
is randomly generated and only available for the local container and
other connecting containers.