From b2b6c86437b845661d9ffb17ca7e8d5b7130ad00 Mon Sep 17 00:00:00 2001
From: claudio <claudio@hubris.local>
Date: Wed, 22 Apr 2026 01:02:35 +0200
Subject: [PATCH] Explicitly set X-Forwarded-Host for forward_auth (Authentik
 needs it)

---
 Caddyfile | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/Caddyfile b/Caddyfile
index 295d28d..187e865 100644
--- a/Caddyfile
+++ b/Caddyfile
@@ -9,6 +9,9 @@
             uri /outpost.goauthentik.io/auth/caddy
             copy_headers X-Authentik-Username X-Authentik-Groups X-Authentik-Email X-Authentik-Name X-Authentik-Uid X-Authentik-Jwt X-Authentik-Meta-Jwks X-Authentik-Meta-Outpost X-Authentik-Meta-Provider X-Authentik-Meta-App X-Authentik-Meta-Version
             trusted_proxies private_ranges
+            header_up X-Forwarded-Host {host}
+            header_up X-Forwarded-Proto {scheme}
+            header_up X-Forwarded-Uri {uri}
         }
     }
 }