This repository has been archived on 2024-05-31. You can view files and clone it, but cannot push or open issues or pull requests.
authentik/outpost
Jens Langhammer 10b45a8dea api: fix 401 responses which should be 403s
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-04-19 19:03:00 +02:00
..
cmd/proxy outposts: update go module domain 2021-01-16 21:45:24 +01:00
pkg api: fix 401 responses which should be 403s 2021-04-19 19:03:00 +02:00
.dockerignore outpost: rename proxy to outpost 2021-01-16 19:20:27 +01:00
.gitignore outpost: rename proxy to outpost 2021-01-16 19:20:27 +01:00
Makefile outpost: rename proxy to outpost 2021-01-16 19:20:27 +01:00
README.md stages/consent: fix wrong widget for expire 2021-02-02 15:01:33 +01:00
azure-pipelines.yml flows: fix linting 2021-04-17 12:01:04 +02:00
go.mod api: mount outposts under outposts/instances to match flows 2021-04-19 18:51:12 +02:00
go.sum api: mount outposts under outposts/instances to match flows 2021-04-19 18:51:12 +02:00
main.go outpost: separate ak-api and proxy further for future outposts 2021-01-16 21:41:39 +01:00
proxy.Dockerfile build(deps): bump golang from 1.16.2 to 1.16.3 in /outpost (#690) 2021-04-02 09:41:35 +02:00

README.md

authentik outpost

CI Build status Docker pulls (proxy)

Reverse Proxy based on oauth2_proxy, completely managed and monitored by authentik.

Usage

authentik Proxy is built to be configured by authentik itself, hence the only options you can directly give it are connection params.

The following environment variable are implemented:

AUTHENTIK_HOST: Full URL to the authentik instance with protocol, i.e. "https://authentik.company.tld"

AUTHENTIK_TOKEN: Token used to authenticate against authentik. This is generated after an Outpost instance is created.

AUTHENTIK_INSECURE: This environment variable can optionally be set to ignore the SSL Certificate of the authentik instance. Applies to both HTTP and WS connections.

Development

authentik Proxy uses an auto-generated API Client to communicate with authentik. This client is not kept in git. To generate the client locally, run make generate.

Afterwards you can build the proxy like any other Go project, using go build.