authentik: add sso.hubris.network site for LAN forward-auth outpost callback

Domain-level proxy providers (Paperless, qBit) need an external_host that
routes to the LAN outpost (192.168.8.6), not auth.hubris.network (now the VPS
core). New site sso.hubris.network -> reverse_proxy 192.168.8.6:9000.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
2026-06-01 00:41:55 +02:00
parent 6ea8e727d4
commit c906a5acc7

View File

@@ -223,3 +223,11 @@ secrets.hubris.network {
}
reverse_proxy 192.168.8.205:9820
}
# Authentik LAN forward-auth outpost (external_host for domain-level providers)
sso.hubris.network {
tls {
dns ionos {env.IONOS_AUTH_API_TOKEN}
}
reverse_proxy 192.168.8.6:9000
}