fix: remove forward-auth gate for jellyfin, use SSO plugin OIDC flow instead
This commit is contained in:
13
Caddyfile
13
Caddyfile
@@ -39,16 +39,9 @@ media.hubris.network {
|
|||||||
tls {
|
tls {
|
||||||
dns ionos {env.IONOS_AUTH_API_TOKEN}
|
dns ionos {env.IONOS_AUTH_API_TOKEN}
|
||||||
}
|
}
|
||||||
# API and streaming paths — no Authentik (Jellyfin apps use their own auth)
|
# SSO plugin handles auth via OIDC redirect to Authentik.
|
||||||
@api path /api/* /socket /Audio/* /Videos/* /Items/* /Users/* /Sessions/* /System/* /LiveTv/* /Music/* /Artists/* /Albums/* /Playlists/* /Images/* /Subtitle* /videos/* /audio/* /sso/* /SSO-Auth/*
|
# No forward-auth gate — Jellyfin login page shows SSO button directly.
|
||||||
handle @api {
|
reverse_proxy 192.168.8.206:8096
|
||||||
reverse_proxy 192.168.8.206:8096
|
|
||||||
}
|
|
||||||
# Web UI — gated behind Authentik
|
|
||||||
handle {
|
|
||||||
import authentik
|
|
||||||
reverse_proxy 192.168.8.206:8096
|
|
||||||
}
|
|
||||||
}
|
}
|
||||||
|
|
||||||
git.hubris.network {
|
git.hubris.network {
|
||||||
|
|||||||
Reference in New Issue
Block a user