diff --git a/playbooks/roles/caddy/files/snippets b/playbooks/roles/caddy/files/snippets index 1de7f22..f3877c2 100644 --- a/playbooks/roles/caddy/files/snippets +++ b/playbooks/roles/caddy/files/snippets @@ -1,19 +1,3 @@ -(auth_serguzim_me) { - # always forward outpost path to actual outpost - reverse_proxy /outpost.goauthentik.io/* authentik:9000 - - # forward authentication to outpost - forward_auth authentik:9000 { - uri /outpost.goauthentik.io/auth/caddy - - # capitalization of the headers is important, otherwise they will be empty - copy_headers X-Authentik-Username X-Authentik-Groups X-Authentik-Email X-Authentik-Name X-Authentik-Uid X-Authentik-Jwt X-Authentik-Meta-Jwks X-Authentik-Meta-Outpost X-Authentik-Meta-Provider X-Authentik-Meta-App X-Authentik-Meta-Version - - # optional, in this config trust all private ranges, should probably be set to the outposts IP - trusted_proxies private_ranges - } -} - (default) { encode zstd gzip }