Refactor authentik.yml and local_services.yml to rename services and add authentication middleware

2026-05-23 00:16:49 +00:00 · 2024-09-14 16:29:20 +08:00
parent df53a0535a
commit e9f517509d
2 changed files with 48 additions and 8 deletions
@@ -3,6 +3,25 @@ http:
    pvetransport:
      insecureSkipVerify: true

+  middlewares:
+    authentik:
+      forwardAuth:
+        address: "http://authentik-server:9000/outpost.goauthentik.io/auth/traefik"
+        trustForwardHeader: true
+        authResponseHeaders:
+        - X-authentik-username
+        - X-authentik-groups
+        - X-authentik-email
+        - X-authentik-name
+        - X-authentik-uid
+        - X-authentik-jwt
+        - X-authentik-meta-jwks
+        - X-authentik-meta-outpost
+        - X-authentik-meta-provider
+        - X-authentik-meta-app
+        - X-authentik-meta-version
+        - authorization
+
  routers:
    local-traefik-public-https:
      entryPoints: