wip

code-server/docker-compose.yml

@@ -17,6 +17,7 @@ services:
       - code-server-data:/config
     labels:
       kompose.service.expose: code-server.wayl.one
+      # traefik.ingress.kubernetes.io/router.middlewares: default-forwardauth-authelia@kubernetescrd
     ports:
       - 8443
 volumes:

code-server/middleware.yml

@@ -0,0 +1,16 @@
+apiVersion: traefik.containo.us/v1alpha1
+kind: Middleware
+metadata:
+  name: forwardauth-authelia
+  namespace: code-server
+  labels:
+    app.kubernetes.io/instance: authelia
+    app.kubernetes.io/name: authelia
+spec:
+  forwardAuth:
+    address: http://auth.wayl.one/api/verify?rd=https%3A%2F%2Fcode-server.wayl.one%2F
+    authResponseHeaders:
+      - Remote-User
+      - Remote-Name
+      - Remote-Email
+      - Remote-Groups