feat(caddy): bypass Authentik forward_auth for Plane API key requests

Adds a named matcher @plane_api that matches /api/* requests carrying X-API-Key, routing them directly to plane_api:8000 without hitting the Authentik outpost. Browser/UI sessions still go through forward_auth. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-11 15:32:09 -05:00
parent 792305e5fa
commit 993504106e
1 changed files with 7 additions and 0 deletions
@@ -418,6 +418,13 @@ docs.ginnoir.com {
 plane.ginnoir.com {
 	route {
 		import authentik_outpost
+		@plane_api {
+			path /api/*
+			header X-API-Key *
+		}
+		handle @plane_api {
+			reverse_proxy plane_api:8000
+		}
 		handle /api/* {
 			import authentik_forward_auth
 			reverse_proxy plane_api:8000