diff --git a/main.go b/main.go
index 5f4536b..9b7c937 100644
--- a/main.go
+++ b/main.go
@@ -72,7 +72,7 @@ func main() {
 	mux := http.NewServeMux()
 	mux.HandleFunc("/healthz", healthz(refresher))
 	mux.HandleFunc("/playlist", basicAuth(cfg, servePlaylist(cfg, refresher)))
-	mux.HandleFunc("/epg", basicAuth(cfg, serveEPG(cfg, refresher)))
+	mux.HandleFunc("/epg", serveEPG(cfg, refresher)) // unauthenticated — XMLTV clients auto-fetch url-tvg without creds
 	mux.HandleFunc("/", basicAuth(cfg, servePlaylist(cfg, refresher))) // alias
 
 	srv := &http.Server{Addr: cfg.ListenAddr, Handler: mux}