bundles/traefik/files/common-middlewares.yaml


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31

http:
  middlewares:

    # metrics
    replacepath-bare:
      replacepath:
        path: /
    replacepath-metrics:
      replacepath:
        path: /metrics

    # authelia
    authelia:
      forwardAuth:
        trustForwardHeader: true
        authResponseHeaders: Remote-User,Remote-Groups,Remote-Email,Remote-Name
        maxResponseBodySize: 104857600 # 100MB in bytes
% if node.name == "inazuma":
        address: http://authelia:9091/api/authz/forward-auth
% elif node.name == "shimakaze":
        address: http://inazuma:9091/api/authz/forward-auth
% endif

% if node.name == "inazuma--TODO":
    # tsauth
    tsauth:
      forwardAuth:
        trustForwardHeader: true
        authResponseHeaders: ^Tailscale-
        address: http://localhost:3000
% endif