authentik proxy outside servers

[flat fox]

Screenshots would help, but a couple questions:

How do you have the external and internal addresses typed out in the provider?

Do you have an application attached to these providers?

Do you have them enabled in your default outpost?

Is your outpost setup correctly to resolve to a domain name?

Are you using the self signed certificate provided by authentik, or are you using an imported one?

Do you have the certificate set under Brands, and also under the providers, if using a custom cert?

Feel free to look over my Public Gitlab for help since I only use Authentik as my proxy and everything is setup using transparent proxy. I do have a cloudflare certificate imported but you can try to substitute it for the default self signed one from authentik for testing, or maybe you can leave it blank, not sure.

https://gitlab.lazymedia.media/public-files/public-files

[quaint otter]

first off, I have everything going through cloudflare, which goes to caddy, which goes to authentik (or other services that uses authentik only for saml or oauth).

external is "https://whateverservice.domain.com" internal is https://ipaddress:port (ssl validation is disabled)

in caddy, all I have for this domain is the reverse proxy statement https://whateverservice.domain.com reverse_proxy authentikIPaddress:authentikport

yes an application is attached

how do I validate that my outpost is able to resolve a domain name ? and would it matter since I'm using IP for the internal side ?

my caddy has a valid pki cert, authentik has a self signed

cert is selected in both location (also tried without)

keep in mind that I have no issues doing the transparent proxy for services that are hosted in the same docker node (unraid in this case).