Forward-auth snippet final (dynamic X-Forwarded-Host, caddy fmt)

This commit is contained in:
claudio
2026-04-22 01:05:31 +02:00
parent b2b6c86437
commit f2fd96e336

View File

@@ -2,10 +2,8 @@
# Usage: add "import authentik" inside any site block to gate it. # Usage: add "import authentik" inside any site block to gate it.
(authentik) { (authentik) {
route { route {
reverse_proxy /outpost.goauthentik.io/* https://auth.hubris.network { reverse_proxy /outpost.goauthentik.io/* http://192.168.8.180:9000
header_up Host {upstream_hostport} forward_auth http://192.168.8.180:9000 {
}
forward_auth https://auth.hubris.network {
uri /outpost.goauthentik.io/auth/caddy uri /outpost.goauthentik.io/auth/caddy
copy_headers X-Authentik-Username X-Authentik-Groups X-Authentik-Email X-Authentik-Name X-Authentik-Uid X-Authentik-Jwt X-Authentik-Meta-Jwks X-Authentik-Meta-Outpost X-Authentik-Meta-Provider X-Authentik-Meta-App X-Authentik-Meta-Version copy_headers X-Authentik-Username X-Authentik-Groups X-Authentik-Email X-Authentik-Name X-Authentik-Uid X-Authentik-Jwt X-Authentik-Meta-Jwks X-Authentik-Meta-Outpost X-Authentik-Meta-Provider X-Authentik-Meta-App X-Authentik-Meta-Version
trusted_proxies private_ranges trusted_proxies private_ranges
@@ -102,10 +100,8 @@ docker.hubris.network {
tls_insecure_skip_verify tls_insecure_skip_verify
} }
} }
} }
jellyseerr.hubris.network { jellyseerr.hubris.network {
tls { tls {
dns ionos {env.IONOS_AUTH_API_TOKEN} dns ionos {env.IONOS_AUTH_API_TOKEN}