582812b3ec
website: Copy files during build. website: Allow for mixed env builds. website: Reduce build size. website: Expose build. website: Add build memory debugging. WIP: Disable broken links check to compare memory usage. website: Update deps. website: Clean up API paths. website: Flesh out 3.8 fixes. Format. website: Update ignore paths. Website: Clean up integrations build. website: Fix paths. website: Optimize remark. website: Update deps. website: Format. website: Remove linking. website: Fix paths. wip: Attempt API only build. Prep. Migrate render to runtime. Tidy sidebar. Clean up templates. docs: Move directory. WIP docs: Flesh out split. website: Fix issue where routes have collisions.
63 lines
1.5 KiB
Plaintext
63 lines
1.5 KiB
Plaintext
---
|
|
title: General troubleshooting steps
|
|
---
|
|
|
|
import TabItem from "@theme/TabItem";
|
|
import Tabs from "@theme/Tabs";
|
|
|
|
## Set the log level to TRACE
|
|
|
|
Setting the log level to trace configures the outpost to trace-log all the headers given in forward auth requests.
|
|
|
|
This is helpful to confirm that certain required Headers are correctly forwarded from the reverse proxy.
|
|
|
|
### When using the embedded Outpost
|
|
|
|
Set the authentik log level to `TRACE`:
|
|
|
|
<Tabs
|
|
groupId="platform"
|
|
defaultValue="docker-compose"
|
|
values={[
|
|
{label: 'docker-compose', value: 'docker-compose'},
|
|
{label: 'Kubernetes', value: 'kubernetes'},
|
|
]}>
|
|
<TabItem value="docker-compose">
|
|
Add the following block to your `.env` file:
|
|
|
|
```shell
|
|
AUTHENTIK_LOG_LEVEL=trace
|
|
```
|
|
|
|
Afterwards, run `docker compose up -d`.
|
|
|
|
</TabItem>
|
|
<TabItem value="kubernetes">
|
|
Add the following block to your `values.yml` file:
|
|
|
|
```yaml
|
|
authentik:
|
|
log_level: trace
|
|
```
|
|
|
|
Afterwards, upgrade helm release.
|
|
|
|
</TabItem>
|
|
</Tabs>
|
|
|
|
### When using a standard outpost
|
|
|
|
Edit the outpost settings and set `log_level: trace`. This setting should propagate to the outpost instances within a couple seconds.
|
|
|
|
## Ensure `/outpost.goauthentik.io` is accessible
|
|
|
|
Everything under `/outpost.goauthentik.io` should be publicly accessible, as URLs under this path are used for authentication.
|
|
|
|
To check this, run `curl -v https://app.company/outpost.goauthentik.io/ping`. A correct setup should contain output looking like this:
|
|
|
|
```
|
|
[...]
|
|
< HTTP/2 204
|
|
[...]
|
|
```
|