anubis policy: allow /outpost.goauthentik.io/* transport paths
Login/PoW/POST traffic to the outpost URL space cannot solve a fresh PoW challenge per request; exempt the transport prefix (authentik's own session gate still protects it) so the guarded-host sign-in journey completes.
This commit is contained in:
@@ -10,6 +10,11 @@
|
|||||||
"path_regex": "^/\\.within\\.website",
|
"path_regex": "^/\\.within\\.website",
|
||||||
"action": "ALLOW"
|
"action": "ALLOW"
|
||||||
},
|
},
|
||||||
|
{
|
||||||
|
"name": "serve authentik outpost transport",
|
||||||
|
"path_regex": "^/outpost\\.goauthentik\\.io/",
|
||||||
|
"action": "ALLOW"
|
||||||
|
},
|
||||||
{
|
{
|
||||||
"name": "challenge everything else",
|
"name": "challenge everything else",
|
||||||
"path_regex": ".",
|
"path_regex": ".",
|
||||||
|
|||||||
Reference in New Issue
Block a user