outpost/proxyv2: allow port offset via yaml

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

authentik/lib/default.yml

@@ -10,6 +10,7 @@ web:
   listen: 0.0.0.0:9000
   listen_tls: 0.0.0.0:9443
   load_local_files: false
+  outpost_port_offset: 0
 
 redis:
   host: localhost

internal/config/struct.go

@@ -31,6 +31,7 @@ type WebConfig struct {
 	ListenTLS              string `yaml:"listen_tls"`
 	LoadLocalFiles         bool   `yaml:"load_local_files" env:"AUTHENTIK_WEB_LOAD_LOCAL_FILES"`
 	DisableEmbeddedOutpost bool   `yaml:"disable_embedded_outpost" env:"AUTHENTIK_WEB__DISABLE_EMBEDDED_OUTPOST"`
+	OutpostPortOffset      int    `yaml:"outpost_port_offset"`
 }
 
 type PathsConfig struct {

internal/outpost/proxyv2/proxyv2.go

@@ -14,6 +14,7 @@ import (
 	"github.com/pires/go-proxyproto"
 	log "github.com/sirupsen/logrus"
 	"goauthentik.io/api"
+	"goauthentik.io/internal/config"
 	"goauthentik.io/internal/crypto"
 	"goauthentik.io/internal/outpost/ak"
 	"goauthentik.io/internal/outpost/proxyv2/application"
@@ -54,7 +55,7 @@ func NewProxyServer(ac *ak.APIController) *ProxyServer {
 	globalMux.Use(web.NewLoggingHandler(l.WithField("logger", "authentik.outpost.proxyv2.http"), nil))
 	s := &ProxyServer{
 		Listen:     "0.0.0.0:%d",
-		PortOffset: 0,
+		PortOffset: config.G.Web.OutpostPortOffset,
 
 		cryptoStore: ak.NewCryptoStore(ac.Client.CryptoApi),
 		apps:        make(map[string]*application.Application),