#Forward Auth with NPM - I want to pay someone for dedicated support to resolve a simple issue.

1 messages · Page 1 of 1 (latest)

placid flint
#

Serious applicants only please.

I have a seemingly simple use case:

I will have internal users (myself and a few other 'admins') that are part of my company.
I will have external users - authentik will be used to to confirm their access to a webapp (identity & MFA).

I was planning to have mywebapp.mydomain.com authenticate through auth.mydomain.com, meaning I want to use authentik's flows to handle the logins to my webapp that has no authentication mechanisms. I want external users to use MFA to login.

From what I can understand from the docs the best way to do this is to do a single-app forward auth. I have tried this across many environments for many months and I cannot ever get it to work.

I have the following docker compose project running:
Containers:

  • Nginx Proxy Manager
  • authentik

I have 2 Proxy Hosts configured:

I have tinkered with severl permutations of settings in Nginx Proxy Manager, using suggested snippets from authentik's WebUI, the web, YouTube, ChatGPT, stack overflow, and more. I have been trying to get successful results with this basic configuration on several different environments - PCs, networks, VMs, domains, companies, etc. No matter what I cannot get this seemingly simple feature to work.

I would like to pay for some support since my account doesn't qualify for the included support tier.

scenic lantern
#

Does your app have basic auth? Or you want to add the auth through authentik and only proceed if you pass login method?

placid iris
#

I would advise against using nginx proxy manager, and either use plain nginx or traefik

small tiger
#

Why? All good saying "dont use this" but its gootd to provide a reason because it could just be personal dislike to something about it, or could be a very valid reason that people do not know

scenic lantern
#

Doing more advanced setups can become combersome. It depends what you plan on doing.