ginnoir/homelabstack
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(caddy): bypass Authentik forward_auth for Plane API key requests
Deploy to valhalla / deploy (push) Has been cancelled
Details

Browse Source 
Adds a named matcher @plane_api that matches /api/* requests carrying
X-API-Key, routing them directly to plane_api:8000 without hitting the
Authentik outpost. Browser/UI sessions still go through forward_auth.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
ginnoir
2026-06-11 15:32:09 -05:00
co-authored by Claude Sonnet 4.6
parent 792305e5fa
commit 993504106e
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Caddyfile
+7
View File
@@ -418,6 +418,13 @@ docs.ginnoir.com {
plane.ginnoir.com { plane.ginnoir.com {
route { route {
import authentik_outpost import authentik_outpost
@plane_api {
path /api/*
header X-API-Key *
}
handle @plane_api {
reverse_proxy plane_api:8000
}
handle /api/* { handle /api/* {
import authentik_forward_auth import authentik_forward_auth
reverse_proxy plane_api:8000 reverse_proxy plane_api:8000