Files

55 lines
1.8 KiB
YAML

# http:
# routers:
# traefik-dashboard:
# rule: Host(`traefik.japnet.nl`)
# entryPoints:
# - websecure
# service: api@internal
# tls:
# certResolver: cf
http:
middlewares:
authentikfw:
forwardAuth:
address: http://auth.japnet.nl:9000/outpost.goauthentik.io/auth/traefik
trustForwardHeader: true
authRequestHeaders:
- X-Forwarded-Proto
- X-Forwarded-Host
- X-Forwarded-Uri
- X-Forwarded-Method
- X-Forwarded-For
authResponseHeaders:
- X-authentik-username
- X-authentik-groups
- X-authentik-entitlements
- X-authentik-email
- X-authentik-name
- X-authentik-uid
- X-authentik-jwt
- X-authentik-meta-jwks
- X-authentik-meta-outpost
- X-authentik-meta-provider
- X-authentik-meta-app
- X-authentik-meta-version
routers:
default-router:
rule: "Host(`traefik.japnet.nl`)"
middlewares:
- authentikfw
priority: 10
service: app
default-router-auth:
rule: "Host(`traefik.japnet.nl`) && PathPrefix(`/outpost.goauthentik.io/`)"
priority: 15
service: authentik
services:
app:
loadBalancer:
servers:
- url: http://192.168.2.75:8090
authentikfw:
loadBalancer:
servers:
- url: http://auth.japnet.nl:9000/outpost.goauthentik.io