Fix caddy forward_auth settings for authentik
The snippet will now set the correct Host for the next hop and keep the original site in the X-Forward-Auth-Host. The authentik caddy-site will then put the X-Forward-Auth-Host into the X-Forwarded-Host (which would normally be the authentik host/domain). Authentik is able to handle the X-Forwarded-Host header.
This commit is contained in:
		
							parent
							
								
									5d22308f0f
								
							
						
					
					
						commit
						9af19f51fa
					
				
					 5 changed files with 16 additions and 10 deletions
				
			
		|  | @ -1,7 +1,7 @@ | |||
| { | ||||
| 	email {{ admin_email }} | ||||
| 
 | ||||
|     metrics | ||||
| 	metrics | ||||
| 
 | ||||
| 	servers { | ||||
| 		strict_sni_host on | ||||
|  | @ -11,9 +11,9 @@ | |||
| import /etc/caddy/snippets | ||||
| 
 | ||||
| http://{{ host_vpn.domain }} { | ||||
|     import vpn_only | ||||
| 	import vpn_only | ||||
| 
 | ||||
|     metrics | ||||
| 	metrics | ||||
| } | ||||
| 
 | ||||
| *.serguzim.me { | ||||
|  |  | |||
		Loading…
	
	Add table
		Add a link
		
	
		Reference in a new issue