Set authentication on all services

bootstrap.docker-compose.yml

@@ -71,6 +71,7 @@ services:
       traefik.enable: true
       traefik.http.services.portainer.loadbalancer.server.port: 9443
       traefik.http.services.portainer.loadbalancer.server.scheme: https
+      traefik.http.routers.portainer.middlewares: authentik@file
 
 networks:
   macvlan:

collectors.docker-compose.yml

@@ -16,6 +16,7 @@ services:
     restart: unless-stopped
     labels:
       traefik.enable: true
+      traefik.http.routers.mylar.middlewares: authentik@file
 
   lazylibrarian:
     image: linuxserver/lazylibrarian
@@ -32,6 +33,7 @@ services:
     restart: unless-stopped
     labels:
       traefik.enable: true
+      traefik.http.routers.lazylibrarian.middlewares: authentik@file
 
   sonarr:
     image: linuxserver/sonarr
@@ -47,6 +49,7 @@ services:
     restart: unless-stopped
     labels:
       traefik.enable: true
+      traefik.http.routers.sonarr.middlewares: authentik@file
 
   radarr:
     image: linuxserver/radarr
@@ -62,6 +65,7 @@ services:
     restart: unless-stopped
     labels:
       traefik.enable: true
+      traefik.http.routers.radarr.middlewares: authentik@file
 
   bazarr:
     image: linuxserver/bazarr
@@ -76,6 +80,7 @@ services:
     restart: unless-stopped
     labels:
       traefik.enable: true
+      traefik.http.routers.bazarr.middlewares: authentik@file
 
   ombi:
     image: linuxserver/ombi
@@ -90,6 +95,7 @@ services:
     restart: unless-stopped
     labels:
       traefik.enable: true
+      traefik.http.routers.ombi.middlewares: authentik@file
 
 networks:
   traefik:

docker/configs/traefik/dynamic/authentik.yml

@@ -16,3 +16,12 @@ http:
           - X-authentik-meta-provider
           - X-authentik-meta-app
           - X-authentik-meta-version
+          - Authorization
+
+  routers:
+      middlewares:
+        - authentik@file
+    general-auth:
+      rule: PathPrefix(`/outpost.goauthentik.io/`)
+      service: authentik-authentication@docker
+      priority: 1000

downloads.docker-compose.yml

@@ -18,6 +18,7 @@ services:
     restart: unless-stopped
     labels:
       traefik.enable: true
+      traefik.http.routers.prowlarr.middlewares: authentik@file
 
   flaresolverr:
     image: ngosang/flaresolverr:3.0.0.beta3 #TODO: Move to a stable version!
@@ -56,6 +57,7 @@ services:
     labels:
       traefik.enable: true
       traefik.http.services.transmission.loadbalancer.server.port: 9091
+      traefik.http.routers.transmission.middlewares: authentik@file
 
   youtube-dl:
     image: alexta69/metube
@@ -75,6 +77,7 @@ services:
     restart: unless-stopped
     labels:
       traefik.enable: true
+      traefik.http.routers.youtube-dl.middlewares: authentik@file
 
 # TODO:
 # NZBGet

media.docker-compose.yml

@@ -39,6 +39,7 @@ services:
     restart: unless-stopped
     labels:
       traefik.enable: true
+      traefik.http.routers.plaxt.middlewares: authentik@file
 
   # TODO:
   # Calibre-web

utilities.docker-compose.yml

@@ -24,6 +24,7 @@ services:
     restart: unless-stopped
     labels:
       traefik.enable: true
+      traefik.http.routers.smokeping.middlewares: authentik@file
 
   duckdns:
     image: linuxserver/duckdns
@@ -46,6 +47,7 @@ services:
     restart: unless-stopped
     labels:
       traefik.enable: true
+      traefik.http.routers.heimdall.middlewares: authentik@file
 
 networks:
   docker: