Switch to traefik-forward-auth@file

homelab/server/config/keycloak/docker-compose.yml

@@ -58,11 +58,11 @@ services:
       #- "traefik.http.services.forwardauth.loadbalancer.server.port=4181"
       #- "traefik.http.routers.forwardauth.entrypoints=websecure"
       - "traefik.http.routers.forwardauth.rule=Path(`/_oauth`)"
-      - "traefik.http.routers.forwardauth.middlewares=traefik-forward-auth"
+      #- "traefik.http.routers.forwardauth.middlewares=traefik-forward-auth"
       - "traefik.http.routers.forwardauth.tls.certresolver=lets-encrypt"
-      - "traefik.http.middlewares.traefik-forward-auth.forwardauth.address=http://forwardauth:4181"
-      - "traefik.http.middlewares.traefik-forward-auth.forwardauth.authResponseHeaders=X-Forwarded-User"
-      - "traefik.http.middlewares.traefik-forward-auth.forwardauth.trustForwardHeader=true"
+      #- "traefik.http.middlewares.traefik-forward-auth.forwardauth.address=http://forwardauth:4181"
+      #- "traefik.http.middlewares.traefik-forward-auth.forwardauth.authResponseHeaders=X-Forwarded-User"
+      #- "traefik.http.middlewares.traefik-forward-auth.forwardauth.trustForwardHeader=true"
 
 networks:
   web:

homelab/server/config/nginx/docker-compose.yml

@@ -8,7 +8,7 @@ services:
     labels:
       - traefik.http.routers.nginx.rule=Host(`test.jafner.net`)
       - traefik.http.routers.nginx.tls.certresolver=lets-encrypt
-      - traefik.http.routers.nginx.middlewares=traefik-forward-auth
+      - traefik.http.routers.nginx.middlewares=traefik-forward-auth@file
 
 networks:
   web:

homelab/server/config/traefik/config/middlewares.yaml

@@ -46,3 +46,9 @@ http:
     pihole:
       addprefix:
         prefix: "/admin"
+    traefik-forward-auth:
+      forwardauth:
+        address: http://forwardauth:4181
+        trustForwardHeader: true
+        authResponseHeaders:
+          - X-Forwarded-User