From 91f09aec6870854ac8dc99d9e5cc4b986da16227 Mon Sep 17 00:00:00 2001
From: traveler <phil@pncharris.com>
Date: Tue, 3 Dec 2024 15:46:36 -0600
Subject: [PATCH] sa

---
 Caddyfile | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/Caddyfile b/Caddyfile
index a1c5b3c..27443f3 100644
--- a/Caddyfile
+++ b/Caddyfile
@@ -1,4 +1,17 @@
+
 dns.netgrimoire.com {
     reverse_proxy 192.168.5.7:53443 
  }
 
+ (authentik) {
+	# Always forward outpost path to actual outpost
+	reverse_proxy /outpost.goauthentik.io/* http://authentik:9000
+
+	# Forward authentication to outpost
+	forward_auth http://authentik:9000 {
+		uri /outpost.goauthentik.io/auth/caddy
+
+		# Capitalization of the headers is important, otherwise they will be empty
+		copy_headers X-Authentik-Username X-Authentik-Groups X-Authentik-Email X-Authentik-Name X-Authentik-Uid X-Authentik-Jwt X-Authentik-Meta-Jwks X-Authentik-Meta-Outpost X-Authentik-Meta-Provider X-Authentik-Meta-App X-Authentik-Meta-Version
+	}
+}
\ No newline at end of file