nucleo000/cataRio
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Config: Migrar autenticación a outpost exteriorlvl2 de Authentik
All checks were successful
build-and-deploy / build-and-deploy (push) Successful in 17s
Details

Browse Source 
- Reemplazar middleware authentik-forward-auth@file por middleware local
- Configurar autenticación hacia http://exteriorlvl2.nucleoriofrio.com
- Agregar headers de forward auth completos (username, email, name, uid, groups, entitlements)
- Agregar X-Forwarded-Scheme header para mejor compatibilidad HTTPS
This commit is contained in:
josedario87
2025-10-19 13:18:38 -06:00
parent d0a22cdfc1
commit 8803c26a9c
1 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
docker-compose.yml
View File

@@ -67,10 +67,16 @@ services:
- "traefik.http.routers.${APP_NAME}.tls.certresolver=letsencrypt"
- "traefik.http.routers.${APP_NAME}.priority=10"
- "traefik.http.routers.${APP_NAME}.service=${APP_NAME}"
- "traefik.http.routers.${APP_NAME}.middlewares=authentik-forward-auth@file,${APP_NAME}-headers"
- "traefik.http.routers.${APP_NAME}.middlewares=${APP_NAME}-authentik,${APP_NAME}-headers"
# Middleware de autenticación usando outpost exteriorlvl2
- "traefik.http.middlewares.${APP_NAME}-authentik.forwardauth.address=http://exteriorlvl2.nucleoriofrio.com/outpost.goauthentik.io/auth/traefik"
- "traefik.http.middlewares.${APP_NAME}-authentik.forwardauth.trustForwardHeader=true"
- "traefik.http.middlewares.${APP_NAME}-authentik.forwardauth.authResponseHeaders=X-authentik-username,X-authentik-email,X-authentik-name,X-authentik-uid,X-authentik-groups,X-authentik-entitlements,Set-Cookie"
# Custom headers middleware
- "traefik.http.middlewares.${APP_NAME}-headers.headers.customrequestheaders.X-Forwarded-Proto=https"
- "traefik.http.middlewares.${APP_NAME}-headers.headers.customrequestheaders.X-Forwarded-Scheme=https"
# CORS middleware for public resources
- "traefik.http.middlewares.${APP_NAME}-cors.headers.accesscontrolallowmethods=GET,OPTIONS"