nathan/homelab
1
0
Fork 0
Code Issues Pull Requests Actions Packages Releases Wiki Activity

fix(prowlarr): resolve auth_mode_conflict by using shared authentik middleware

Browse Source 
Remove redundant prowlarr_outpost sidecar container and apply the shared
authentik-auth@file middleware to the prowlarr router. The Authentik forward
auth middleware already exists in the Traefik dynamic configuration and
provides the necessary authentication layer without requiring a dedicated
outpost container per service.
This commit is contained in:
nathan 2026-05-31 21:24:02 -04:00
parent 2610b5a430
commit 19089602b8
1 changed files with 35 additions and 43 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

78
nodes/heimdall/prowlarr/compose.yaml
View File

@ -1,43 +1,35 @@
############################################################### ###############################################################
# Networks # Networks
############################################################### ###############################################################
networks: networks:
proxy-net: proxy-net:
name: proxy-net name: proxy-net
external: true external: true
############################################################### ###############################################################
# Services # Services
############################################################### ###############################################################
services: services:
prowlarr: prowlarr:
image: lscr.io/linuxserver/prowlarr:2.3.5.5327-ls142 image: lscr.io/linuxserver/prowlarr:2.3.5.5327-ls142
container_name: prowlarr container_name: prowlarr
mem_limit: 2048m mem_limit: 2048m
environment: environment:
- PUID=0 - PUID=0
- PGID=0 - PGID=0
- TZ=America/New_York - TZ=America/New_York
volumes: volumes:
- /mnt/appdata/prowlarr/data:/config - /mnt/appdata/prowlarr/data:/config
ports: ports:
- 9696:9696 - 9696:9696
restart: unless-stopped restart: unless-stopped
networks: networks:
- proxy-net - proxy-net
prowlarr_outpost: labels:
image: ghcr.io/goauthentik/proxy:2026.2.2 - "traefik.enable=true"
container_name: prowlarr_outpost - "traefik.http.routers.prowlarr-proxy.entrypoints=websecure"
networks: - "traefik.http.routers.prowlarr-proxy.rule=Host(`prowlarr.castaldifamily.com`)"
- proxy-net - "traefik.http.routers.prowlarr-proxy.tls=true"
environment: - "traefik.http.routers.prowlarr-proxy.tls.certresolver=cloudflare"
AUTHENTIK_HOST: https://sso.castaldifamily.com - "traefik.http.routers.prowlarr-proxy.middlewares=authentik-auth@file,security-headers@file"
AUTHENTIK_TOKEN: 42FCcV9gmTfixaak77xW4eAZIMUUJ0u5vGsxvumfo1Lav5DIyLViDz4xqinE - "traefik.http.services.prowlarr-proxy.loadbalancer.server.port=9696"
AUTHENTIK_INSECURE: "false"
labels:
- "traefik.enable=true"
- "traefik.http.routers.prowlarr-proxy.entrypoints=websecure"
- "traefik.http.routers.prowlarr-proxy.rule=Host(`prowlarr.castaldifamily.com`)"
- "traefik.http.routers.prowlarr-proxy.tls=true"
- "traefik.http.routers.prowlarr-proxy.tls.certresolver=cloudflare"
- "traefik.http.services.prowlarr-proxy.loadbalancer.server.port=9000"