anubis policy: allow /outpost.goauthentik.io/* transport paths

Login/PoW/POST traffic to the outpost URL space cannot solve a fresh PoW challenge per request; exempt the transport prefix (authentik's own session gate still protects it) so the guarded-host sign-in journey completes.
2026-08-29 23:49:42 -07:00
parent 29f9a86884
commit 2a72efad44
1 changed files with 5 additions and 0 deletions
@@ -10,6 +10,11 @@
      "path_regex": "^/\\.within\\.website",
      "action": "ALLOW"
    },
+    {
+      "name": "serve authentik outpost transport",
+      "path_regex": "^/outpost\\.goauthentik\\.io/",
+      "action": "ALLOW"
+    },
    {
      "name": "challenge everything else",
      "path_regex": ".",