# /services/traefik/config/middlewares/dashboard.yml

http:
  routers:
    traefik:
      entryPoints:
        - https
      rule: Host(`traefik.eliasfink.de`)
      middlewares:
        - traefik-dashboard-auth
      service: api@internal

  middlewares:
    traefik-dashboard-auth:
      forwardAuth:
        address: http://authentik_proxy:9000/outpost.goauthentik.io/auth/traefik
        trustForwardHeader: true
        authResponseHeaders:
          - X-authentik-username
          - X-authentik-groups
          - X-authentik-entitlements
          - X-authentik-email
          - X-authentik-name
          - X-authentik-uid
          - X-authentik-jwt
          - X-authentik-meta-jwks
          - X-authentik-meta-outpost
          - X-authentik-meta-provider
          - X-authentik-meta-app
          - X-authentik-meta-version