Apache Reverse Proxy for Authentik

[chriscroome]

The following seems to work for an Apache reverse proxy for Authentik:

  <IfModule headers_module>
    RequestHeader setifempty X-Forwarded-Proto https
    RequestHeader setifempty X-Forwarded-For %{THE_HOST}e
    Header setifempty Strict-Transport-Security "max-age=630720646"
  </IfModule>
  <Location "/ws">
    <IfModule proxy_module>
      ProxyPreserveHost on
      ProxyPass "ws://127.0.0.1:9000/ws" "upgrade=websocket"
      ProxyPassReverse "ws://127.0.0.1:9000/ws"
    </IfModule>
  </Location>
  <Location "/">
    <IfModule proxy_module>
      ProxyPreserveHost on
      ProxyPass "http://127.0.0.1:9000/"
      ProxyPassReverse "http://127.0.0.1:9000/"
    </IfModule>
  </Location>
  <IfModule rewrite_module>
    RewriteEngine on
    RewriteCond %{REQUEST_URI} ^/ws [NC]
    RewriteCond %{HTTP:Upgrade} websocket [NC]
    RewriteCond %{HTTP:Connection} upgrade [NC]
    RewriteRule ^/?(.*) "ws://127.0.0.1:9000/$1" [P,L]
  </IfModule>

I'm using this with the following ports set in docker-compose.yml:

services:
  server:
    ports:
      - "127.0.0.1:${AUTHENTIK_PORT_HTTP:-9000}:9000"