Update traefik/dynamic/dashboard.yml

traefik/dynamic/dashboard.yml

@@ -1,32 +1,47 @@
-http:
-  routers:
-    traefik-dashboard:
-      rule: Host(`traefik.japnet.nl`)
-      entryPoints:
-        - websecure
-      service: api@internal
-      tls:
-        certResolver: cf
-
 # http:
-#   middlewares:
-#     authentik:
-#       forwardAuth:
-#         address: "http://auth.japnet.nl:9000/outpost.goauthentik.io/auth/traefik-dashboard"
-#         trustForwardHeader: true
-#         authResponseHeaders:
-#           - X-authentik-username
-#           - X-authentik-groups
-#           - X-authentik-email
-#           - X-authentik-name
-
 #   routers:
 #     traefik-dashboard:
-#       rule: "Host(`traefik.japnet.nl`)"
+#       rule: Host(`traefik.japnet.nl`)
 #       entryPoints:
 #         - websecure
-#       middlewares:
-#         - authentik
 #       service: api@internal
 #       tls:
 #         certResolver: cf
+
+http:
+    middlewares:
+        authentik:
+            forwardAuth:
+                address: http://outpost.company:9000/outpost.goauthentik.io/auth/traefik
+                trustForwardHeader: true
+                authResponseHeaders:
+                    - X-authentik-username
+                    - X-authentik-groups
+                    - X-authentik-entitlements
+                    - X-authentik-email
+                    - X-authentik-name
+                    - X-authentik-uid
+                    - X-authentik-jwt
+                    - X-authentik-meta-jwks
+                    - X-authentik-meta-outpost
+                    - X-authentik-meta-provider
+                    - X-authentik-meta-app
+                    - X-authentik-meta-version
+    routers:
+        default-router:
+            rule: "Host(`traefik.japnet.nl`)"
+            middlewares:
+                - authentik
+            priority: 10
+            service: app
+        default-router-auth:
+            rule: "Host(`traefik.japnet.nl`) && PathPrefix(`/outpost.goauthentik.io/`)"
+            priority: 15
+            service: authentik
+    services:
+        app: 
+          service: api@internal
+        authentik:
+            loadBalancer:
+                servers:
+                    - url: http://auth.japnet.nl:9000/outpost.goauthentik.io