feat: add authentik forward-auth gate for media.hubris.network (API bypass for apps)

teddy.hubris.network: fix backend to https://192.168.8.243:8443
2026-07-04 19:45:14 +02:00 · 2026-06-29 22:11:21 +02:00
1 changed files with 10 additions and 1 deletions
--- a/9
+++ b/9
@@ -39,8 +39,17 @@ media.hubris.network {
 	tls {
 		dns ionos {env.IONOS_AUTH_API_TOKEN}
 	}
+	# API and streaming paths — no Authentik (Jellyfin apps use their own auth)
+	@api path /api/* /socket /Audio/* /Videos/* /Items/* /Users/* /Sessions/* /System/* /LiveTv/* /Music/* /Artists/* /Albums/* /Playlists/* /Images/* /Subtitle* /videos/* /audio/*
+	handle @api {
 		reverse_proxy 192.168.8.206:8096
 	}
+	# Web UI — gated behind Authentik
+	handle {
+		import authentik
+		reverse_proxy 192.168.8.206:8096
+	}
+}

 git.hubris.network {
 	tls {
Author	SHA1	Message	Date
root	acc5af8477	feat: add authentik forward-auth gate for media.hubris.network (API bypass for apps)	2026-07-04 19:45:14 +02:00
root	e01a39175f	teddy.hubris.network: fix backend to https://192.168.8.243:8443	2026-06-29 22:11:21 +02:00