caddytest/integration/caddyfile_adapt/forward_auth_authelia.txt


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111

app.example.com {
	forward_auth authelia:9091 {
		uri /api/verify?rd=https://authelia.example.com
		copy_headers Remote-User Remote-Groups Remote-Name Remote-Email
	}

	reverse_proxy backend:8080
}
----------
{
	"apps": {
		"http": {
			"servers": {
				"srv0": {
					"listen": [
						":443"
					],
					"routes": [
						{
							"match": [
								{
									"host": [
										"app.example.com"
									]
								}
							],
							"handle": [
								{
									"handler": "subroute",
									"routes": [
										{
											"handle": [
												{
													"handle_response": [
														{
															"match": {
																"status_code": [
																	2
																]
															},
															"routes": [
																{
																	"handle": [
																		{
																			"handler": "headers",
																			"request": {
																				"set": {
																					"Remote-Email": [
																						"{http.reverse_proxy.header.Remote-Email}"
																					],
																					"Remote-Groups": [
																						"{http.reverse_proxy.header.Remote-Groups}"
																					],
																					"Remote-Name": [
																						"{http.reverse_proxy.header.Remote-Name}"
																					],
																					"Remote-User": [
																						"{http.reverse_proxy.header.Remote-User}"
																					]
																				}
																			}
																		}
																	]
																}
															]
														}
													],
													"handler": "reverse_proxy",
													"headers": {
														"request": {
															"set": {
																"X-Forwarded-Method": [
																	"{http.request.method}"
																],
																"X-Forwarded-Uri": [
																	"{http.request.uri}"
																]
															}
														}
													},
													"rewrite": {
														"method": "GET",
														"uri": "/api/verify?rd=https://authelia.example.com"
													},
													"upstreams": [
														{
															"dial": "authelia:9091"
														}
													]
												},
												{
													"handler": "reverse_proxy",
													"upstreams": [
														{
															"dial": "backend:8080"
														}
													]
												}
											]
										}
									]
								}
							],
							"terminal": true
						}
					]
				}
			}
		}
	}
}