From c6a3707363bab1ace90501b96ac8172b29f698cc Mon Sep 17 00:00:00 2001
From: claudio <claudio@hubris.local>
Date: Wed, 22 Apr 2026 14:17:57 +0200
Subject: [PATCH] blog: gate only admin/login paths with Authentik; leave
 public reading open

---
 Caddyfile | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/Caddyfile b/Caddyfile
index afa4b73..f02d787 100644
--- a/Caddyfile
+++ b/Caddyfile
@@ -137,11 +137,17 @@ sab.hubris.network {
 }
 
 blog.hubris.network {
-    import authentik
     tls {
         dns ionos {env.IONOS_AUTH_API_TOKEN}
     }
-    reverse_proxy 192.168.8.205:8080
+    @admin path /login* /logout* /me* /admin* /pages/new /import
+    handle @admin {
+        import authentik
+        reverse_proxy 192.168.8.205:8080
+    }
+    handle {
+        reverse_proxy 192.168.8.205:8080
+    }
 }
 
 photos.hubris.network {