ginnoir/homelabstack
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add Caddy bypasses so MCP can reach *arr and Uptime Kuma through Authentik.
Deploy to valhalla / deploy (push) Has been cancelled
Details

Browse Source 
TB-006 forward_auth blocks machine clients with HTML/302; route /api on *arr
sites and /api plus socket.io on uptime (LAN/tailnet only) before forward_auth.
Also add Cursor interview-first rule and small Authentik/FreshRSS debug helpers.
This commit is contained in:
ginnoir
2026-06-11 17:37:21 -05:00
parent 776478c035
commit e3bf11d18e
4 changed files with 66 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Caddyfile
+27
View File
@@ -31,6 +31,11 @@
}
}
# Clients on LAN, Docker, or tailnet (same ranges as internal_only).
(remote_internal) {
remote_ip 192.168.1.0/24 172.16.0.0/12 100.64.0.0/10 127.0.0.1
}
# =============================================================
# FOUNDRY VTT — public
# =============================================================
@@ -87,6 +92,9 @@ sonarr.ginnoir.com {
import internal_only
route {
import authentik_outpost
handle /api/* {
reverse_proxy sonarr:8989
}
handle {
import authentik_forward_auth
reverse_proxy sonarr:8989
@@ -98,6 +106,9 @@ radarr.ginnoir.com {
import internal_only
route {
import authentik_outpost
handle /api/* {
reverse_proxy radarr:7878
}
handle {
import authentik_forward_auth
reverse_proxy radarr:7878
@@ -109,6 +120,9 @@ bazarr.ginnoir.com {
import internal_only
route {
import authentik_outpost
handle /api/* {
reverse_proxy bazarr:6767
}
handle {
import authentik_forward_auth
reverse_proxy bazarr:6767
@@ -120,6 +134,9 @@ prowlarr.ginnoir.com {
import internal_only
route {
import authentik_outpost
handle /api/* {
reverse_proxy prowlarr:9696
}
handle {
import authentik_forward_auth
reverse_proxy prowlarr:9696
@@ -178,6 +195,9 @@ whisparr.ginnoir.com {
import internal_only
route {
import authentik_outpost
handle /api/* {
reverse_proxy whisparr:6969
}
handle {
import authentik_forward_auth
reverse_proxy whisparr:6969
@@ -324,6 +344,13 @@ portainer.ginnoir.com {
uptime.ginnoir.com {
route {
import authentik_outpost
@uptime_mcp {
path /api/* /socket.io/*
import remote_internal
}
handle @uptime_mcp {
reverse_proxy uptime-kuma:3001
}
handle {
import authentik_forward_auth
reverse_proxy uptime-kuma:3001