Add global auth

home-apps/home.yaml

@@ -47,6 +47,7 @@ metadata:
   namespace: home-apps
   annotations:
     cert-manager.io/cluster-issuer: "letsencrypt-prod"
+    traefik.ingress.kubernetes.io/router.middlewares: "traefik-middleware-global-auth@kubernetescrd"
 spec:
   ingressClassName: traefik
   tls:

traefik-middleware/global-auth.yaml

@@ -6,6 +6,10 @@ metadata:
 spec:
   forwardAuth:
     address: "https://pass.junv.cc/auth"
+    authRequestHeaders:
+      - "X-Forwarded-Proto"
+      - "X-Forwarded-Host"
+      - "X-Forwarded-Uri"
     authResponseHeaders:
       - "X-Forwarded-User"
     trustForwardHeader: true