serguzim/infrastructure
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Remove caddy forward auth snippet

Browse source
This commit is contained in:
Tobias Reisinger 2025-05-25 16:13:39 +02:00
parent 5d22308f0f
commit 059b0d6596
Signed by: serguzim
GPG key ID: 13AD60C237A28DFE
1 changed files with 0 additions and 16 deletions
Download patch file Download diff file Expand all files Collapse all files

16
playbooks/roles/caddy/files/snippets
View file

@ -1,19 +1,3 @@
(auth_serguzim_me) {
# always forward outpost path to actual outpost
reverse_proxy /outpost.goauthentik.io/* authentik:9000
# forward authentication to outpost
forward_auth authentik:9000 {
uri /outpost.goauthentik.io/auth/caddy
# capitalization of the headers is important, otherwise they will be empty
copy_headers X-Authentik-Username X-Authentik-Groups X-Authentik-Email X-Authentik-Name X-Authentik-Uid X-Authentik-Jwt X-Authentik-Meta-Jwks X-Authentik-Meta-Outpost X-Authentik-Meta-Provider X-Authentik-Meta-App X-Authentik-Meta-Version
# optional, in this config trust all private ranges, should probably be set to the outposts IP
trusted_proxies private_ranges
}
}
(default) {
encode zstd gzip
}