From c1fbef26fce1efa39149e48b12b300dfb8b8b4df Mon Sep 17 00:00:00 2001
From: hofq <54744977+hofq@users.noreply.github.com>
Date: Fri, 26 Dec 2025 19:31:41 +0100
Subject: [PATCH] fix: additional proxy headers for complete support of
 oauth2-proxy

https://oauth2-proxy.github.io/oauth2-proxy/configuration/overview#header-options
---
 .../rootfs/usr/local/nginx/conf/proxy_trusted_headers.conf    | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/docker/main/rootfs/usr/local/nginx/conf/proxy_trusted_headers.conf b/docker/main/rootfs/usr/local/nginx/conf/proxy_trusted_headers.conf
index 54c05ab3b..c945810be 100644
--- a/docker/main/rootfs/usr/local/nginx/conf/proxy_trusted_headers.conf
+++ b/docker/main/rootfs/usr/local/nginx/conf/proxy_trusted_headers.conf
@@ -18,6 +18,10 @@ proxy_set_header X-Forwarded-User $http_x_forwarded_user;
 proxy_set_header X-Forwarded-Groups $http_x_forwarded_groups;
 proxy_set_header X-Forwarded-Email $http_x_forwarded_email;
 proxy_set_header X-Forwarded-Preferred-Username $http_x_forwarded_preferred_username;
+proxy_set_header X-Auth-Request-User $http_x_auth_request_user;
+proxy_set_header X-Auth-Request-Groups $http_x_auth_request_groups;
+proxy_set_header X-Auth-Request-Email $http_x_auth_request_email;
+proxy_set_header X-Auth-Request-Preferred-Username $http_x_auth_request_preferred_username;
 proxy_set_header X-authentik-username $http_x_authentik_username;
 proxy_set_header X-authentik-groups $http_x_authentik_groups;
 proxy_set_header X-authentik-email $http_x_authentik_email;