Update file duplicati-ingress.yaml

internalproxy/templates/duplicati-ingress.yaml

@@ -82,6 +82,9 @@ spec:
   entryPoints:
     - websecure
   routes:
+      middlewares:
+    - name: authentik
+      namespace: traefik
   - match: Host(`duplicati.internal.durp.info`) && PathPrefix(`/`)
     kind: Rule
     services:
@@ -89,9 +92,6 @@ spec:
       port: 8200
   - match: Host(`duplicati.internal.durp.info`) && PathPrefix(`/outpost.goauthentik.io`)
     kind: Rule
-    middlewares:
-    - name: default-auth
-    - name: auth-redirect
     services:
     - name: ak-outpost-authentik-embedded-outpost
       port: 80
@@ -99,29 +99,27 @@ spec:
     secretName: duplicati-tls
 
 ---
-
 apiVersion: traefik.containo.us/v1alpha1
 kind: Middleware
 metadata:
-  name: auth-duplicati-middleware
+    name: authentik
+    namespace: traefik
 spec:
-  plugin:
+    forwardAuth:
-    auth:
+        address: http://ak-outpost-authentik-embedded-outpost.authentik.svc.cluster.local:9000/outpost.goauthentik.io/auth/traefik
-      forward:
+        trustForwardHeader: true
-        address: http://ak-outpost-authentik-embedded-outpost.authentik.svc.cluster.local:9000/outpost.goauthentik.io/auth/nginx
+        authResponseHeaders:
-      responseHeaders:
+            - X-authentik-username
-        - X-authentik-username
+            - X-authentik-groups
-        - X-authentik-groups
+            - X-authentik-email
-        - X-authentik-email
+            - X-authentik-name
-        - X-authentik-name
+            - X-authentik-uid
-        - X-authentik-uid
+            - X-authentik-jwt
-      authResponseHeaders:
+            - X-authentik-meta-jwks
-        - Set-Cookie
+            - X-authentik-meta-outpost
-      authHeaderName: X-Authentik-User
+            - X-authentik-meta-provider
-      authResponseHeaderName: X-Authentik-User
+            - X-authentik-meta-app
-      successStatusCode: 200
+            - X-authentik-meta-version
-      failureStatusCode: 401
-      signoutRedirectURL: https://duplicati.internal.durp.info/outpost.goauthentik.io/start?rd=$escaped_request_uri
 
 ---