diff --git a/hosting/generated-envoy.dev.yaml b/hosting/generated-envoy.dev.yaml
new file mode 100644
index 0000000000..72cad34104
--- /dev/null
+++ b/hosting/generated-envoy.dev.yaml
@@ -0,0 +1,125 @@
+static_resources:
+  listeners:
+  - name: main_listener
+    address:
+      socket_address: { address: 0.0.0.0, port_value: 10000 }
+    filter_chains:
+    - filters:
+      - name: envoy.filters.network.http_connection_manager
+        typed_config:
+          "@type": type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
+          stat_prefix: ingress
+          codec_type: auto
+          route_config:
+            name: local_route
+            virtual_hosts:
+            - name: local_services
+              domains: ["*"]
+              routes:
+              - match: { prefix: "/db/" }
+                route:
+                  cluster: couchdb-service
+                  prefix_rewrite: "/"
+
+              - match: { prefix: "/cache/" }
+                route:
+                  cluster: redis-service
+                  prefix_rewrite: "/"
+
+              - match: { prefix: "/api/" }
+                route:
+                  cluster: server-dev
+
+              - match: { prefix: "/app_" }
+                route:
+                  cluster: server-dev
+
+              - match: { prefix: "/builder/" }
+                route:
+                  cluster: builder-dev
+
+              - match: { prefix: "/builder" }
+                route:
+                  cluster: builder-dev
+                  prefix_rewrite: "/builder/"
+ 
+              # minio is on the default route because this works
+              # best, minio + AWS SDK doesn't handle path proxy
+              - match: { prefix: "/" }
+                route:
+                  cluster: minio-service
+
+          http_filters:
+          - name: envoy.filters.http.router
+
+  clusters:
+  - name: minio-service
+    connect_timeout: 0.25s
+    type: strict_dns
+    lb_policy: round_robin
+    load_assignment:
+      cluster_name: minio-service
+      endpoints:
+      - lb_endpoints:
+        - endpoint:
+            address:
+              socket_address:
+                address: minio-service
+                port_value: 9000
+
+  - name: couchdb-service
+    connect_timeout: 0.25s
+    type: strict_dns
+    lb_policy: round_robin
+    load_assignment:
+      cluster_name: couchdb-service
+      endpoints:
+      - lb_endpoints:
+        - endpoint:
+            address:
+              socket_address:
+                address: couchdb-service
+                port_value: 5984
+
+  - name: redis-service
+    connect_timeout: 0.25s
+    type: strict_dns
+    lb_policy: round_robin
+    load_assignment:
+      cluster_name: redis-service
+      endpoints:
+      - lb_endpoints:
+        - endpoint:
+            address:
+              socket_address:
+                address: redis-service
+                port_value: 6379
+
+  - name: server-dev
+    connect_timeout: 0.25s
+    type: strict_dns
+    lb_policy: round_robin
+    load_assignment:
+      cluster_name: server-dev
+      endpoints:
+      - lb_endpoints:
+        - endpoint:
+            address:
+              socket_address:
+                address: host.docker.internal
+                port_value: 4001
+
+  - name: builder-dev
+    connect_timeout: 15s
+    type: strict_dns
+    lb_policy: round_robin
+    load_assignment:
+      cluster_name: builder-dev
+      endpoints:
+      - lb_endpoints:
+        - endpoint:
+            address:
+              socket_address:
+                address: host.docker.internal
+                port_value: 3000
+
diff --git a/packages/worker/src/middleware/authenticated.js b/packages/worker/src/middleware/authenticated.js
index 8701da7316..dd7e1d974d 100644
--- a/packages/worker/src/middleware/authenticated.js
+++ b/packages/worker/src/middleware/authenticated.js
@@ -18,7 +18,7 @@ module.exports = async (ctx, next) => {
 
   if (!token) {
     ctx.auth = {
-      authenticated: true,
+      authenticated: false,
     }
     ctx.appId = appId
     // ctx.user = {