From 08d42ef8cdbfea35a784eca0e7a419af1704e53c Mon Sep 17 00:00:00 2001
From: Junwei Zhao <wahyd4@gmail.com>
Date: Fri, 8 Aug 2025 11:09:38 +1000
Subject: [PATCH] Add global auth

---
 home-apps/home.yaml                 | 1 +
 traefik-middleware/global-auth.yaml | 4 ++++
 2 files changed, 5 insertions(+)

diff --git a/home-apps/home.yaml b/home-apps/home.yaml
index 67f0a95..8070d8e 100644
--- a/home-apps/home.yaml
+++ b/home-apps/home.yaml
@@ -47,6 +47,7 @@ metadata:
   namespace: home-apps
   annotations:
     cert-manager.io/cluster-issuer: "letsencrypt-prod"
+    traefik.ingress.kubernetes.io/router.middlewares: "traefik-middleware-global-auth@kubernetescrd"
 spec:
   ingressClassName: traefik
   tls:
diff --git a/traefik-middleware/global-auth.yaml b/traefik-middleware/global-auth.yaml
index 64422a4..61b6194 100644
--- a/traefik-middleware/global-auth.yaml
+++ b/traefik-middleware/global-auth.yaml
@@ -6,6 +6,10 @@ metadata:
 spec:
   forwardAuth:
     address: "https://pass.junv.cc/auth"
+    authRequestHeaders:
+      - "X-Forwarded-Proto"
+      - "X-Forwarded-Host"
+      - "X-Forwarded-Uri"
     authResponseHeaders:
       - "X-Forwarded-User"
     trustForwardHeader: true