dtoro/caddy-conf
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: add authentik forward-auth gate for media.hubris.network (API bypass for apps)

Browse Source
This commit is contained in:
root
2026-07-04 19:45:14 +02:00
parent e01a39175f
commit acc5af8477
1 changed files with 11 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
Caddyfile
View File

@@ -39,7 +39,16 @@ media.hubris.network {
tls { tls {
dns ionos {env.IONOS_AUTH_API_TOKEN} dns ionos {env.IONOS_AUTH_API_TOKEN}
} }
reverse_proxy 192.168.8.206:8096 # API and streaming paths — no Authentik (Jellyfin apps use their own auth)
@api path /api/* /socket /Audio/* /Videos/* /Items/* /Users/* /Sessions/* /System/* /LiveTv/* /Music/* /Artists/* /Albums/* /Playlists/* /Images/* /Subtitle* /videos/* /audio/*
handle @api {
reverse_proxy 192.168.8.206:8096
}
# Web UI — gated behind Authentik
handle {
import authentik
reverse_proxy 192.168.8.206:8096
}
} }
git.hubris.network { git.hubris.network {
@@ -282,9 +291,5 @@ teddy.hubris.network {
tls { tls {
dns ionos {env.IONOS_AUTH_API_TOKEN} dns ionos {env.IONOS_AUTH_API_TOKEN}
} }
reverse_proxy https://192.168.8.243:8443 { reverse_proxy 192.168.8.243:8080
transport http {
tls_insecure_skip_verify
}
}
} }