diff --git a/nix-system-configs/modules/system/traefik.nix b/nix-system-configs/modules/system/traefik.nix index 4ff696b..9bf39f4 100644 --- a/nix-system-configs/modules/system/traefik.nix +++ b/nix-system-configs/modules/system/traefik.nix @@ -147,29 +147,18 @@ in { forwardAuth = { address = "http://127.0.0.1:8090/.within.website/x/cmd/anubis/api/check"; trustForwardHeader = true; - # Forward authentication headers - authResponseHeaders = [ - "X-Anubis-Authorized" - ]; - authRequestHeaders = [ - "X-Forwarded-Proto" - "X-Forwarded-Host" - "X-Forwarded-Uri" - "X-Forwarded-For" - "X-Real-Ip" - ]; }; }; }; http.routers = { - anubis-api = { - rule = "Host(`anubis.prg-radio.org`) && PathPrefix(`/.within.website/x/cmd/anubis/api`)"; - service = "anubis"; - entryPoints = ["websecure"]; - priority = 200; - tls = {}; - }; + #anubis-api = { + # rule = "Host(`anubis.prg-radio.org`) && PathPrefix(`/.within.website/x/cmd/anubis/api`)"; + # service = "anubis"; + # entryPoints = ["websecure"]; + # priority = 200; + # tls = {}; + # }; # Anubis router (for challenge page) anubis = { @@ -221,7 +210,7 @@ in { servers = [ {url = "http://127.0.0.1:8090";} ]; - passHostHeader = true; + #passHostHeader = true; }; forgejo.loadBalancer = {