From 9a002648cc834b02eab1fdc322f5789a7e74b298 Mon Sep 17 00:00:00 2001
From: claudio <claudio@hubris.local>
Date: Wed, 22 Apr 2026 13:33:51 +0200
Subject: [PATCH] Gate qbit.hubris.network with Authentik forward-auth, bypass
 /api/* for clients

---
 Caddyfile | 15 +++++++++++----
 1 file changed, 11 insertions(+), 4 deletions(-)

diff --git a/Caddyfile b/Caddyfile
index 7f0aeb6..283d893 100644
--- a/Caddyfile
+++ b/Caddyfile
@@ -116,10 +116,17 @@ jellyseerr.hubris.network {
 }
 
 qbit.hubris.network {
-	tls {
-		dns ionos {env.IONOS_AUTH_API_TOKEN}
-	}
-	reverse_proxy 192.168.8.132:8080
+    tls {
+        dns ionos {env.IONOS_AUTH_API_TOKEN}
+    }
+    @api path /api/*
+    handle @api {
+        reverse_proxy 192.168.8.132:8080
+    }
+    handle {
+        import authentik
+        reverse_proxy 192.168.8.132:8080
+    }
 }
 
 sab.hubris.network {