#Troubles with Authentik, Traefik, and setting up a Forward Auth (Domain Level) proxy

1 messages · Page 1 of 1 (latest)

prime dagger
#

Hello, I am trying to set up a Forward Auth (Domain Level) proxy. I have Traefik and Authentik both installed in Docker containers (compose files attached).

  1. When I try to docker compose up the Traefik compose file, I get an error about port 9000 already being in use. I note that the Authentik server (in the Authentik docker-compose.yml) has port 9000 defined. Is this the correct way of doing things? Or can I change this so that Traefik can use port 9000 instead? If so, how can I do this?
  2. The authentik-proxy service (within the Traefik docker-compose.yml) has a line "AUTHENTIK_TOKEN: token-generated-by-authentik". Where can I find this token? I was able to find a token by going into Authentik > Applications > Outposts, and then clicking on "View Deployment Info" next to "Domain Forward Auth Provider", and then clicking the "Click to copy token" button. Is this the correct token to use or is it meant to be retrieved from elsewhere?
  3. Is this the correct way of proceeding to achieve this goal (having Authentik enabled for all of my services, using Traefik as a proxy)? Or am I going down the wrong path?

Thank you in advance.

📎 docker-compose-traefik.yml 📎 docker-compose-authentik.yml
prime dagger
#

Bump. Any suggestions please?

hybrid trellis
#

I couldn't get domain level working. Let me know if you are able to get that working

prime dagger
#

Nope. Still not working sadly.

remote wedge
#

Did you follow this guide?

prime dagger
gilded bolt
#

The authentik-proxy service is an integrated outpost. I would read up on that.
I have not personally set one up before but I believe the token your looking for is in Directory > Tokens & App Passwords. You can see the Embedded One here. I have made an outpost integrations from the GUI before, but this looks like the manual route. I am guessing you
1.make your app & provider
2. Create an outpost WITH NO integration
3. Take your token from NEW OUTPOST in Directory
4. Supply token as authentik_token above.

Hope this helps

prime dagger