From 6e7d8b6c618e24a8c0f2e79ab828bc2bc5d3e212 Mon Sep 17 00:00:00 2001 From: Logan Garrett Date: Sun, 10 Aug 2025 20:21:43 -0400 Subject: [PATCH] Update proxy_trusted_headers.conf Added support for Cloudflare Access --- .../main/rootfs/usr/local/nginx/conf/proxy_trusted_headers.conf | 2 ++ 1 file changed, 2 insertions(+) diff --git a/docker/main/rootfs/usr/local/nginx/conf/proxy_trusted_headers.conf b/docker/main/rootfs/usr/local/nginx/conf/proxy_trusted_headers.conf index 54c05ab3b..72e92e3da 100644 --- a/docker/main/rootfs/usr/local/nginx/conf/proxy_trusted_headers.conf +++ b/docker/main/rootfs/usr/local/nginx/conf/proxy_trusted_headers.conf @@ -9,6 +9,7 @@ proxy_set_header X-Proxy-Secret $http_x_proxy_secret; # - Traefik forward auth # - oauth2_proxy # - Authentik +# - Cloudflare Access proxy_set_header Remote-User $http_remote_user; proxy_set_header Remote-Groups $http_remote_groups; @@ -23,3 +24,4 @@ proxy_set_header X-authentik-groups $http_x_authentik_groups; proxy_set_header X-authentik-email $http_x_authentik_email; proxy_set_header X-authentik-name $http_x_authentik_name; proxy_set_header X-authentik-uid $http_x_authentik_uid; +proxy_set_header Cf-Access-Authenticated-User-Email $http_cf_access_authenticated_user_email;