apiVersion: traefik.io/v1alpha1
kind: Middleware
metadata:
  name: authentik-koel
  namespace: {{ .Release.Namespace }}
  labels:
    app.kubernetes.io/name: authentik-koel
    app.kubernetes.io/instance: {{ .Release.Name }}
    app.kubernetes.io/version: {{ .Chart.AppVersion }}
    app.kubernetes.io/component: auth
    app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
  forwardAuth:
    address: http://authentik-outpost-proxy.authentik:9000/outpost.goauthentik.io/auth/traefik
    trustForwardHeader: true
    authResponseHeaders:
      - X-authentik-username
      - X-authentik-groups
      - X-authentik-email
      - X-authentik-name
      - X-authentik-uid
      - X-authentik-jwt
      - X-authentik-meta-jwks
      - X-authentik-meta-outpost
      - X-authentik-meta-provider
      - X-authentik-meta-app
      - X-authentik-meta-version