From f04a82f451aa5a1e3aa252658731b28519f28ed6 Mon Sep 17 00:00:00 2001
From: claudio <claudio@hubris.local>
Date: Wed, 22 Apr 2026 10:12:53 +0200
Subject: [PATCH] paperless: bypass Authentik forward-auth for /api/* so mobile
 apps (own token auth) can work

---
 Caddyfile | 16 +++++++++++-----
 1 file changed, 11 insertions(+), 5 deletions(-)

diff --git a/Caddyfile b/Caddyfile
index 07c19d2..fda1a33 100644
--- a/Caddyfile
+++ b/Caddyfile
@@ -45,11 +45,17 @@ git.hubris.network {
 }
 
 paperless.hubris.network {
-	import authentik
-	tls {
-		dns ionos {env.IONOS_AUTH_API_TOKEN}
-	}
-	reverse_proxy 192.168.8.130:8000
+    tls {
+        dns ionos {env.IONOS_AUTH_API_TOKEN}
+    }
+    @api path /api/*
+    handle @api {
+        reverse_proxy 192.168.8.130:8000
+    }
+    handle {
+        import authentik
+        reverse_proxy 192.168.8.130:8000
+    }
 }
 
 books.hubris.network {