mthomson/fleet-infra
1
0
Fork 0
mirror of https://github.com/michaelthomson0797/fleet-infra.git synced 2026-02-04 21:09:58 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

prowlarr and bazarr forward auth

Browse Source 
Signed-off-by: Michael Thomson <michael@michaelthomson.dev>
This commit is contained in:
Michael Thomson
2024-10-09 14:34:02 -04:00
parent 4ced4d67fa
commit faf2e08be5
4 changed files with 50 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
media/bazarr/ingress.yaml
View File

@@ -6,6 +6,7 @@ metadata:
annotations: annotations:
traefik.ingress.kubernetes.io/router.entrypoints: websecure traefik.ingress.kubernetes.io/router.entrypoints: websecure
traefik.ingress.kubernetes.io/router.tls: "true" traefik.ingress.kubernetes.io/router.tls: "true"
traefik.ingress.kubernetes.io/router.middlewares: authentik-bazarr@kubernetescrd
spec: spec:
rules: rules:
- host: bazarr.michaelthomson.dev - host: bazarr.michaelthomson.dev

1
media/prowlarr/ingress.yaml
View File

@@ -6,6 +6,7 @@ metadata:
annotations: annotations:
traefik.ingress.kubernetes.io/router.entrypoints: websecure traefik.ingress.kubernetes.io/router.entrypoints: websecure
traefik.ingress.kubernetes.io/router.tls: "true" traefik.ingress.kubernetes.io/router.tls: "true"
traefik.ingress.kubernetes.io/router.middlewares: authentik-prowlarr@kubernetescrd
spec: spec:
rules: rules:
- host: prowlarr.michaelthomson.dev - host: prowlarr.michaelthomson.dev

24
traefik/bazarr-middleware.yaml Normal file
View File

@@ -0,0 +1,24 @@
apiVersion: traefik.containo.us/v1alpha1
kind: Middleware
metadata:
name: bazarr
namespace: authentik
spec:
forwardAuth:
address: https://bazarr.michaelthomson.dev/outpost.goauthentik.io/auth/traefik
trustForwardHeader: true
authResponseHeaders:
- X-authentik-username
- X-authentik-groups
- X-authentik-email
- X-authentik-name
- X-authentik-uid
- X-authentik-jwt
- X-authentik-meta-jwks
- X-authentik-meta-outpost
- X-authentik-meta-provider
- X-authentik-meta-app
- X-authentik-meta-version
- authorization
tls:
certSecret: letsencrypt-wildcard-cert-michaelthomson.dev

24
traefik/prowlarr-middleware.yaml Normal file
View File

@@ -0,0 +1,24 @@
apiVersion: traefik.containo.us/v1alpha1
kind: Middleware
metadata:
name: prowlarr
namespace: authentik
spec:
forwardAuth:
address: https://prowlarr.michaelthomson.dev/outpost.goauthentik.io/auth/traefik
trustForwardHeader: true
authResponseHeaders:
- X-authentik-username
- X-authentik-groups
- X-authentik-email
- X-authentik-name
- X-authentik-uid
- X-authentik-jwt
- X-authentik-meta-jwks
- X-authentik-meta-outpost
- X-authentik-meta-provider
- X-authentik-meta-app
- X-authentik-meta-version
- authorization
tls:
certSecret: letsencrypt-wildcard-cert-michaelthomson.dev