adding google auth middleware to traefik

remove duplicate line

media.yml

@@ -66,6 +66,7 @@ services:
       - "traefik.http.middlewares.transmission-https-redirect.redirectscheme.scheme=https"
       - "traefik.http.middlewares.sslheader.headers.customrequestheaders.X-Forwarded-Proto=https"
       - "traefik.http.routers.transmission.middlewares=transmission-https-redirect"
+      - "traefik.http.routers.transmission.middlewares=forward-auth"
       - "traefik.http.routers.transmission-secure.entrypoints=https"
       - "traefik.http.routers.transmission-secure.rule=Host(`transmission.${DOMAIN}`) || Host(`torrent.${DOMAIN}`) "
       - "traefik.http.routers.transmission-secure.tls=true"

network.yml

@@ -70,12 +70,34 @@ services:
       - "traefik.http.middlewares.traefik-https-redirect.redirectscheme.scheme=https"
       - "traefik.http.middlewares.sslheader.headers.customrequestheaders.X-Forwarded-Proto=https"
       - "traefik.http.routers.traefik.middlewares=traefik-https-redirect"
+      - "traefik.http.routers.treafik.middlewares=forward-auth"
       - "traefik.http.routers.traefik-secure.entrypoints=https"
       - "traefik.http.routers.traefik-secure.rule=Host(`traefik.${DOMAIN}`)"
       - "traefik.http.routers.traefik-secure.tls=true"
       - "traefik.http.routers.traefik-secure.tls.certresolver=${DNS}"
       - "traefik.http.routers.traefik-secure.service=api@internal"
 
+  traefik-forward-auth:
+    image: thomseddon/traefik-forward-auth:2.1.0
+    container_name: traefik-auth
+    env_file: 
+      - ./secrets/homelab.env
+    networks:
+      - web
+    labels:
+      - "traefik.enable=true"
+      - "traefik.docker.network=web"
+      - "traefik.http.routers.auth.rule=Host(`auth.${DOMAIN}`)"
+      - "traefik.http.routers.auth.entrypoints=https"
+      - "traefik.http.routers.auth.tls=true"
+      - "traefik.http.routers.auth.tls.certresolver=${DNS}"
+      - "traefik.http.routers.auth.service=auth@docker"
+      - "traefik.http.services.auth.loadbalancer.server.port=4181"
+      - "traefik.http.middlewares.forward-auth.forwardauth.address=http://traefik-forward-auth:4181"
+      - "traefik.http.middlewares.forward-auth.forwardauth.trustForwardHeader=true"
+      - "traefik.http.middlewares.forward-auth.forwardauth.authResponseHeaders=X-Forwarded-User"
+      - "traefik.http.routers.auth.middlewares=forward-auth"
+
   adguardhome:
     image: adguard/adguardhome
     container_name: adguardhome
@@ -100,6 +122,7 @@ services:
       - "traefik.http.middlewares.adguard-https-redirect.redirectscheme.scheme=https"
       - "traefik.http.middlewares.sslheader.headers.customrequestheaders.X-Forwarded-Proto=https"
       - "traefik.http.routers.adguard.middlewares=adguard-https-redirect"
+      - "traefik.http.routers.adguard.middlewares=forward-auth"
       - "traefik.http.routers.adguard-secure.entrypoints=https"
       - "traefik.http.services.adguard-secure.loadbalancer.server.port=3000"
       - "traefik.http.routers.adguard-secure.rule=Host(`adguard.${DOMAIN}`) || Host(`adguardhome.${DOMAIN}`)"

utilities.yml

@@ -82,6 +82,7 @@ services:
       - "traefik.http.middlewares.files-https-redirect.redirectscheme.scheme=https"
       - "traefik.http.middlewares.sslheader.headers.customrequestheaders.X-Forwarded-Proto=https"
       - "traefik.http.routers.files.middlewares=files-https-redirect"
+      - "traefik.http.routers.files.middlewares=forward-auth"
       - "traefik.http.routers.files-secure.entrypoints=https"
       - "traefik.http.routers.files-secure.rule=Host(`files.${DOMAIN}`) || Host(`filebrowser.${DOMAIN}`) "
       - "traefik.http.routers.files-secure.tls=true"
@@ -105,6 +106,7 @@ services:
       - "traefik.http.middlewares.ping-https-redirect.redirectscheme.scheme=https"
       - "traefik.http.middlewares.sslheader.headers.customrequestheaders.X-Forwarded-Proto=https"
       - "traefik.http.routers.ping.middlewares=ping-https-redirect"
+      - "traefik.http.routers.ping.middlewares=forward-auth"
       - "traefik.http.routers.ping-secure.entrypoints=https"
       - "traefik.http.routers.ping-secure.rule=Host(`ping.${DOMAIN}`) || Host(`smokeping.${DOMAIN}`) "
       - "traefik.http.routers.ping-secure.tls=true"