http:
  middlewares:
    authentik:
      forwardAuth:
        address: "http://server:9000/outpost.goauthentik.io/auth/traefik"
        trustForwardHeader: true
        authResponseHeaders:
          - X-authentik-username
          - X-authentik-groups
          - X-authentik-email
          - X-authentik-name

  routers:
    traefik-dashboard:
      rule: "Host(`traefik.japnet.nl`)"
      entryPoints:
        - websecure
      middlewares:
        - authentik
      service: api@internal
      tls:
        certResolver: cf