dtoro/caddy-conf
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

cleanup: point authentik forward-auth and sso to VPS

Browse Source
This commit is contained in:
root
2026-06-04 22:47:28 +02:00
parent f520afad60
commit 2962a6e485
1 changed files with 3 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
Caddyfile
View File

@@ -2,8 +2,8 @@
# Usage: add "import authentik" inside any site block to gate it.
(authentik) {
route {
reverse_proxy /outpost.goauthentik.io/* http://192.168.8.6:9000
forward_auth http://192.168.8.6:9000 {
reverse_proxy /outpost.goauthentik.io/* https://auth.hubris.network:443
forward_auth https://auth.hubris.network:443 {
uri /outpost.goauthentik.io/auth/caddy
copy_headers X-Authentik-Username X-Authentik-Groups X-Authentik-Email X-Authentik-Name X-Authentik-Uid X-Authentik-Jwt X-Authentik-Meta-Jwks X-Authentik-Meta-Outpost X-Authentik-Meta-Provider X-Authentik-Meta-App X-Authentik-Meta-Version
trusted_proxies private_ranges
@@ -230,15 +230,4 @@ secrets.hubris.network {
}
# Authentik LAN forward-auth outpost (external_host for domain-level providers)
sso.hubris.network {
tls {
dns ionos {env.IONOS_AUTH_API_TOKEN}
}
reverse_proxy 192.168.8.6:9000
reverse_proxy 192.168.8.6:9000
reverse_proxy 82.165.190.79:443 {
transport http {
tls_server_name auth.hubris.network
}
}
}
# Authentik LAN forward-auth outpost (external_host for domain-level providers)sso.hubris.network { tls { dns ionos {env.IONOS_AUTH_API_TOKEN} } reverse_proxy https://auth.hubris.network:443 { transport http { tls_server_name auth.hubris.network } header_up Host auth.hubris.network }}