habsi/authentik
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

website/docs: Forward authentication proxy and Grafana considerations (#1254)

Browse Source 
* docs: Updated forward authentication proxy nginx buffer config, grafana oauth integration considerations

* docs: Cover edge-case when default grafana org id is not 1
This commit is contained in:
George V
2021-08-14 23:05:23 +03:00
committed by GitHub
parent 769a3424dc
commit 95ceabe1ba
2 changed files with 18 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
website/docs/providers/proxy/forward_auth.mdx
View File

@ -58,6 +58,13 @@ server {
ssl_certificate /etc/ssl/certs/ssl-cert-snakeoil.pem;
ssl_certificate_key /etc/ssl/private/ssl-cert-snakeoil.key;
# Increase buffer size for large headers
# This is needed only if you get 'upstream sent too big header while reading response header from upstream' error when trying to access an application protected by goauthentik
proxy_buffers 8 16k;
proxy_buffer_size 32k;
fastcgi_buffers 16 16k;
fastcgi_buffer_size 32k;
location / {
# Put your proxy_pass to your application here
# proxy_pass http://localhost:5000;
@ -80,9 +87,6 @@ server {
proxy_set_header Host $host;
add_header Set-Cookie $auth_cookie;
auth_request_set $auth_cookie $upstream_http_set_cookie;
# Increase buffer size for large headers
proxy_buffers 8 16k;
proxy_buffer_size 16k;
}
# Special location for when the /auth endpoint returns a 401,