dtoro/caddy-conf
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: add internal HTTP proxy for forward-auth (avoids TLS routing issues)

Browse Source
This commit is contained in:
root
2026-06-04 23:43:48 +02:00
parent fec102895f
commit 408a11c856
1 changed files with 12 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
Caddyfile
View File

@@ -1,9 +1,20 @@
# Internal forward-auth upstream proxy (no TLS between Caddy handlers)
:8099 {
@outpost path /outpost.goauthentik.io/*
reverse_proxy @outpost https://auth.hubris.network:443 {
transport http {
tls_server_name auth.hubris.network
}
header_up Host auth.hubris.network
}
}
# Authentik forward-auth snippet (domain-level mode). # Authentik forward-auth snippet (domain-level mode).
# Usage: add "import authentik" inside any site block to gate it. # Usage: add "import authentik" inside any site block to gate it.
(authentik) { (authentik) {
route { route {
reverse_proxy /outpost.goauthentik.io/* https://auth.hubris.network:443 reverse_proxy /outpost.goauthentik.io/* https://auth.hubris.network:443
forward_auth https://auth.hubris.network:443 { forward_auth http://127.0.0.1:8099 {
uri /outpost.goauthentik.io/auth/caddy uri /outpost.goauthentik.io/auth/caddy
copy_headers X-Authentik-Username X-Authentik-Groups X-Authentik-Email X-Authentik-Name X-Authentik-Uid X-Authentik-Jwt X-Authentik-Meta-Jwks X-Authentik-Meta-Outpost X-Authentik-Meta-Provider X-Authentik-Meta-App X-Authentik-Meta-Version copy_headers X-Authentik-Username X-Authentik-Groups X-Authentik-Email X-Authentik-Name X-Authentik-Uid X-Authentik-Jwt X-Authentik-Meta-Jwks X-Authentik-Meta-Outpost X-Authentik-Meta-Provider X-Authentik-Meta-App X-Authentik-Meta-Version
trusted_proxies private_ranges trusted_proxies private_ranges