Explicitly set X-Forwarded-Host for forward_auth (Authentik needs it)

2026-04-22 01:02:35 +02:00
parent cb124a1cd2
commit b2b6c86437
1 changed files with 3 additions and 0 deletions
--- a/3
+++ b/3
@@ -9,6 +9,9 @@
            uri /outpost.goauthentik.io/auth/caddy
            copy_headers X-Authentik-Username X-Authentik-Groups X-Authentik-Email X-Authentik-Name X-Authentik-Uid X-Authentik-Jwt X-Authentik-Meta-Jwks X-Authentik-Meta-Outpost X-Authentik-Meta-Provider X-Authentik-Meta-App X-Authentik-Meta-Version
            trusted_proxies private_ranges
+            header_up X-Forwarded-Host {host}
+            header_up X-Forwarded-Proto {scheme}
+            header_up X-Forwarded-Uri {uri}
        }
    }
 }