anubis policy: allow /outpost.goauthentik.io/* transport paths

Login/PoW/POST traffic to the outpost URL space cannot solve a fresh PoW
challenge per request; exempt the transport prefix (authentik's own session
gate still protects it) so the guarded-host sign-in journey completes.
This commit is contained in:
Frank
2026-08-29 23:49:42 -07:00
parent 29f9a86884
commit 2a72efad44
+5
View File
@@ -10,6 +10,11 @@
"path_regex": "^/\\.within\\.website", "path_regex": "^/\\.within\\.website",
"action": "ALLOW" "action": "ALLOW"
}, },
{
"name": "serve authentik outpost transport",
"path_regex": "^/outpost\\.goauthentik\\.io/",
"action": "ALLOW"
},
{ {
"name": "challenge everything else", "name": "challenge everything else",
"path_regex": ".", "path_regex": ".",