# http:
#   routers:
#     traefik-dashboard:
#       rule: Host(`traefik.japnet.nl`)
#       entryPoints:
#         - websecure
#       service: api@internal
#       tls:
#         certResolver: cf

http:
    middlewares:
        authentikfw:
            forwardAuth:
                address: http://auth.japnet.nl:9000/outpost.goauthentik.io/auth/traefik
                trustForwardHeader: true
                authResponseHeaders:
                    - X-authentik-username
                    - X-authentik-groups
                    - X-authentik-entitlements
                    - X-authentik-email
                    - X-authentik-name
                    - X-authentik-uid
                    - X-authentik-jwt
                    - X-authentik-meta-jwks
                    - X-authentik-meta-outpost
                    - X-authentik-meta-provider
                    - X-authentik-meta-app
                    - X-authentik-meta-version
    routers:
        default-router:
            rule: "Host(`traefik.japnet.nl`)"
            middlewares:
                - authentikfw
            priority: 10
            service: app
        default-router-auth:
            rule: "Host(`traefik.japnet.nl`) && PathPrefix(`/outpost.goauthentik.io/`)"
            priority: 15
            service: authentik
    services:
        app: 
            loadBalancer:
                servers:
                    - url: http://192.168.2.2:8080
        authentikfw:
            loadBalancer:
                servers:
                    - url: http://auth.japnet.nl:9000/outpost.goauthentik.io