Merge branch 'main' of ssh://forgejo.stackbabber.nl:42223/StackBabber/docker-infra

1. docker-stacks/traefik/data/rules/middlewares.yml

@@ -0,0 +1,20 @@
+http:
+  middlewares:
+    # 1. Authentik Middleware (De Poortwachter)
+    authentik:
+      forwardAuth:
+        # Dit verwijst naar de Authentik Server container intern
+        address: "http://authentik-server-1:9000/outpost.goauthentik.io/auth/traefik"
+        trustForwardHeader: true
+        authResponseHeaders:
+          - "X-authentik-username"
+          - "X-authentik-groups"
+          - "X-authentik-email"
+          - "X-authentik-name"
+          - "X-authentik-uid"
+          - "X-authentik-jwt"
+          - "X-authentik-meta-jwks"
+          - "X-authentik-meta-outpost"
+          - "X-authentik-meta-provider"
+          - "X-authentik-meta-app"
+          - "X-authentik-meta-version"

1. docker-stacks/traefik/docker-compose.yml

@@ -24,6 +24,7 @@ services:
       - "traefik.http.routers.traefik.rule=Host(`traefik.stackbabber.nl`)"
       - "traefik.http.routers.traefik.entrypoints=web"
       - "traefik.http.routers.traefik.service=api@internal"
+      - "traefik.http.routers.traefik.middlewares=authentik@file"
 
 networks:
   proxy: