k.rennerandClaude Opus 4.7 ba413f7b34 paperless: gate every hostname behind authentik forward-auth
Add nginx auth_request annotations to the paperless ingress and a
matching forward_domain ProxyProvider + Application in the Authentik
blueprint, attached to the embedded outpost. cookie_domain=renner.uno
shares the session across all four paperless aliases (paperless.* and
docs.*, both .renner.uno and .k.renner.uno).

Also drop the half-built `Caddy docs.renner.uno` provider that was
producing a phantom ak-outpost-caddy ingress conflicting with the
paperless ingress on docs.renner.uno.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-09 20:01:18 +02:00
S
Description
No description provided
38 MiB
master
Latest
2026-01-31 15:05:31 +00:00
Languages
Go 35.3%
Shell 24.5%
Python 22.5%
Jinja 5.1%
HCL 4.8%
Other 7.7%