Fix caddy forward_auth settings for authentik
The snippet will now set the correct Host for the next hop and keep the original site in the X-Forward-Auth-Host. The authentik caddy-site will then put the X-Forward-Auth-Host into the X-Forwarded-Host (which would normally be the authentik host/domain). Authentik is able to handle the X-Forwarded-Host header.
This commit is contained in:
parent
5d22308f0f
commit
9af19f51fa
5 changed files with 16 additions and 10 deletions
|
@ -1,7 +1,7 @@
|
|||
{
|
||||
email {{ admin_email }}
|
||||
|
||||
metrics
|
||||
metrics
|
||||
|
||||
servers {
|
||||
strict_sni_host on
|
||||
|
@ -11,9 +11,9 @@
|
|||
import /etc/caddy/snippets
|
||||
|
||||
http://{{ host_vpn.domain }} {
|
||||
import vpn_only
|
||||
import vpn_only
|
||||
|
||||
metrics
|
||||
metrics
|
||||
}
|
||||
|
||||
*.serguzim.me {
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue