diff --git a/.gitignore b/.gitignore index 381b555..8b8bc69 100644 --- a/.gitignore +++ b/.gitignore @@ -5,5 +5,4 @@ data db # Files -.env -users \ No newline at end of file +.env \ No newline at end of file diff --git a/traefik/config/dashboard/dashboard.yml b/traefik/config/dashboard/dashboard.yml deleted file mode 100644 index e81b205..0000000 --- a/traefik/config/dashboard/dashboard.yml +++ /dev/null @@ -1,16 +0,0 @@ -# /services/traefik/config/dashboard/dashboard.yml - -http: - routers: - traefik: - entryPoints: - - https - rule: Host(`traefik.eliasfink.de`) - middlewares: - - traefik-dashboard-auth - service: api@internal - - middlewares: - traefik-dashboard-auth: - digestAuth: - usersFile: /etc/traefik/config/dashboard/users \ No newline at end of file diff --git a/traefik/config/middlewares/dashboard.yml b/traefik/config/middlewares/dashboard.yml new file mode 100644 index 0000000..300f109 --- /dev/null +++ b/traefik/config/middlewares/dashboard.yml @@ -0,0 +1,30 @@ +# /services/traefik/config/middlewares/dashboard.yml + +http: + routers: + traefik: + entryPoints: + - https + rule: Host(`traefik.eliasfink.de`) + middlewares: + - traefik-dashboard-auth + service: api@internal + + middlewares: + traefik-dashboard-auth: + forwardAuth: + address: http://authentik_proxy:9000/outpost.goauthentik.io/auth/traefik + trustForwardHeader: true + authResponseHeaders: + - X-authentik-username + - X-authentik-groups + - X-authentik-entitlements + - X-authentik-email + - X-authentik-name + - X-authentik-uid + - X-authentik-jwt + - X-authentik-meta-jwks + - X-authentik-meta-outpost + - X-authentik-meta-provider + - X-authentik-meta-app + - X-authentik-meta-version \ No newline at end of file