Set authentication on all services

docker/configs/traefik/dynamic/authentik.yml

@@ -1,18 +1,27 @@
 http:
-    middlewares:
-        authentik:
-            forwardAuth:
-                address: http://authentik:9000/outpost.goauthentik.io/auth/traefik
-                trustForwardHeader: true
-                authResponseHeaders:
-                    - X-authentik-username
-                    - X-authentik-groups
-                    - X-authentik-email
-                    - X-authentik-name
-                    - X-authentik-uid
-                    - X-authentik-jwt
-                    - X-authentik-meta-jwks
-                    - X-authentik-meta-outpost
-                    - X-authentik-meta-provider
-                    - X-authentik-meta-app
-                    - X-authentik-meta-version
+  middlewares:
+    authentik:
+      forwardAuth:
+        address: http://authentik:9000/outpost.goauthentik.io/auth/traefik
+        trustForwardHeader: true
+        authResponseHeaders:
+          - X-authentik-username
+          - X-authentik-groups
+          - X-authentik-email
+          - X-authentik-name
+          - X-authentik-uid
+          - X-authentik-jwt
+          - X-authentik-meta-jwks
+          - X-authentik-meta-outpost
+          - X-authentik-meta-provider
+          - X-authentik-meta-app
+          - X-authentik-meta-version
+          - Authorization
+
+  routers:
+      middlewares:
+        - authentik@file
+    general-auth:
+      rule: PathPrefix(`/outpost.goauthentik.io/`)
+      service: authentik-authentication@docker
+      priority: 1000

docker/configs/traefik/dynamic/hsts.yml

@@ -6,4 +6,4 @@ http:
         browserXssFilter: true
         stsSeconds: 31536000 # 1 year
         stsPreload: true
-        stsIncludeSubdomains: true
+        stsIncludeSubdomains: true