# Configuración dinámica para authentik.nucleoriofrio.com
# Proxy a authentiknucleo-server-1:9000

http:
  routers:
    authentik-nucleoriofrio:
      rule: "Host(`authentik.nucleoriofrio.com`)"
      entryPoints:
        - websecure
      service: authentik-nucleoriofrio-service
      tls:
        certResolver: letsencrypt
      middlewares:
        - authentik-headers

  services:
    authentik-nucleoriofrio-service:
      loadBalancer:
        servers:
          - url: "http://authentiknucleo-server-1:9000"
        passHostHeader: true

  middlewares:
    authentik-headers:
      headers:
        customRequestHeaders:
          X-Forwarded-Proto: "https"
          X-Forwarded-Scheme: "https"
        customResponseHeaders:
          X-Robots-Tag: "noindex, nofollow"