traefik: use authentik_is_master to inherit master toggle

saltyorg · Aug 4, 2024 · f3ba62d · f3ba62d
1 parent 5fbef7c
commit f3ba62d
Show file tree

Hide file tree

Showing 3 changed files with 10 additions and 3 deletions.
diff --git a/inventories/group_vars/all.yml b/inventories/group_vars/all.yml
@@ -157,6 +157,13 @@ global_themepark_plugin_enabled: false
 
 authelia_is_master: "{{ authelia.master | bool }}"
 
+
+################################
+# Authentik
+################################
+
+authentik_is_master: "{{ authelia.master | bool }}"
+
 ################################
 # ZeroSSL
 ################################

diff --git a/roles/traefik/defaults/main.yml b/roles/traefik/defaults/main.yml
@@ -447,8 +447,8 @@ traefik_docker_labels_default:
   traefik.http.middlewares.authelia-basic.forwardauth.trustForwardHeader: "true"
   traefik.http.middlewares.authelia-basic.forwardauth.authResponseHeaders: "Remote-User, Remote-Groups, Remote-Name, Remote-Email"
   traefik.http.middlewares.authentik.forwardauth.address: "{{ 'http://' + authentik_name + ':9000/outpost.goauthentik.io/auth/traefik'
-                                                          if authelia_is_master
-                                                          else authentik_web_url + '/outpost.goauthentik.io/auth/traefik' }}"
+                                                           if authentik_is_master
+                                                           else authentik_web_url + '/outpost.goauthentik.io/auth/traefik' }}"
   traefik.http.middlewares.authentik.forwardauth.trustForwardHeader: "true"
   traefik.http.middlewares.authentik.forwardauth.authResponseHeaders: "X-authentik-username,X-authentik-groups,X-authentik-email,X-authentik-name,X-authentik-uid,X-authentik-jwt,X-authentik-meta-jwks,X-authentik-meta-outpost,X-authentik-meta-provider,X-authentik-meta-app,X-authentik-meta-version"
 

diff --git a/roles/traefik/tasks/main.yml b/roles/traefik/tasks/main.yml
@@ -90,7 +90,7 @@
 - name: "Import Authentik Role"
   ansible.builtin.include_role:
     name: authentik
-  when: traefik_authentik_enabled and authelia_is_master
+  when: traefik_authentik_enabled and authentik_is_master
 
 - name: "Import Error Pages Role"
   ansible.builtin.include_role: