Keep openai api key safe while sharing access

haproxy.cfg

global
    log stdout format raw local0
    maxconn 2000

defaults
    log     global
    mode    http
    option  httplog
    timeout connect 5000ms
    timeout client  50000ms
    timeout server  50000ms

frontend openai_proxy
    bind *:8000
    default_backend openai_api

backend openai_api
    http-request set-header Authorization "Bearer %[env(OPENAI_API_KEY)]"
    server openai api.openai.com:443 ssl verify required ca-file /etc/ssl/certs/ca-certificates.crt

# docker run --rm -p 8000:8000 -e OPENAI_API_KEY=sk-1234 -v $(pwd):/usr/local/etc/haproxy/ haproxy
# openai.api_base = 'http://localhost:8000' # In python script