traefik-forward-auth VS Synology-Docker-Mediaserver

BTW also keycloak and other similar products offer the oauth-proxy capability, I even used the original oauth2-proxy https://github.com/oauth2-proxy/oauth2-proxy for a while, but it was getting too difficult to maintain for me. I used for a while https://github.com/thomseddon/traefik-forward-auth that was a smart hack configuring a single upstream provider, but it look abandoned. So I was considering authentik but apparently it's just oauth2-proxy embedded in it, at that point why not use oauth2-proxy directly.

It seems there are some more recently updated forks.

Traefik Forward Auth

One way I got this to work (for another app that doesn’t go through cloudflare) was to use Traefik with forward-auth and this: https://github.com/thomseddon/traefik-forward-auth

In front of all of my private dashboards, I use Traefik Forward Auth to limit who can access them.

Hm, interesting. I have worked with traefik-forward-auth before, but I didn't know there is a fork. Are you using the fork? Would you happen to know if this issue from the original project still exists or if it's fixed in the fork?

https://github.com/thomseddon/traefik-forward-auth (just another option if everyone accessing already has a google account)

Traefik ingress + forward auth middleware + traefik-forward-auth does the trick.

Hey have u setup a forward auth? https://github.com/thomseddon/traefik-forward-auth

Try 8080 and 8081? In case it's useful, here's my full Docker stack on Synology, including Calibre and Calibre-web. I normally use the reverse proxy address, but http://synologyIP: 8081 loads my Calibre fine.

Here's my full config, to add to the port comment earlier - everything running completely smoothly on a Synology 218+.

This is perhaps a lot more detail than you want right now, but here's my docker-compose.yml for a bunch of containers running on my Synology 218+. The GitHub repo you're talking about will have an address which you'd point to, adding configuration options like in the examples you'll see in my file.

In case it's useful, here's my (Docker) config using that auth container, which authenticates via Google login and is frontend agnostic.

Thanks for sharing this. My 218+ is running smoothly with this yml (on Github), but I'm sure I'll learn something from yours nevertheless! One thing I'm curious about, though: why did you go the route of freeing up 80 and 443 on the Synology, rather than just forwarding them on your router? In my case, I have Traefik using 89:80 and 449:443, with the router doing those respective forwards.

Here's my full config, in case you want to use it as a starting point.