• 0 Posts
  • 6 Comments
Joined 2 years ago
cake
Cake day: January 22nd, 2025

help-circle


  • I’ve had good success spinning up an authentik instance, and having my reverse proxy hit it first before it routes to the actual app. Puts another security layer in front in case sonarr itself has an issue, for ex.

    Caddy snippet

    
    handle {$host} {
    		route {
    			# always forward outpost path to actual outpost
    			reverse_proxy /outpost.goauthentik.io/* authentik-server-1:9000
    
    			# forward authentication to outpost
    			forward_auth authentik-server-1:9000 {
    				uri /outpost.goauthentik.io/auth/caddy
    
    				# capitalization of the headers is important, otherwise they will be empty
    				copy_headers X-Authentik-Username X-Authentik-Groups X-Authentik-Entitlements X-Authentik-Email X-Authentik-Name X-Authentik-Uid X-Authentik-Jwt X-Authentik-Meta-Jwks X-Authentik-Meta-Outpost X-Authentik-Meta-Provider X-Authentik-Meta-App X-Authentik-Meta-Version
    			}
    			
    			reverse_proxy {this_host_or_ip}:{this_port}
    		}
    }
    
    

    Not gonna solve all your problems. Works for 70% of apps. Nice to slap on when you can.


  • ?? Chicken and egg? It’s not that i cant afford the things I like. It’s that i need to listen to it first to know if I like it enough to purchase it. If someone recommends me some band I never heard of froma genre im not familiar with, I would like to give it a chance. A heavy portion of the music I love now wasn’t something I knew immediately I would like within 30 seconds of hearing it. The likelihood is their recommendation isn’t for me, but I dont know until I listen a bit and simmer at least a short bit.

    So do I just buy everything anyone namedrops outright? Or do I refuse to give a recommendation any chance whatsoever because I make a guess its not for me before I even listened?