From 66212c922a3bfbc19768e462401482a88c4d77b8 Mon Sep 17 00:00:00 2001
From: Valentin Haudiquet <valentin.haudiquet@canonical.com>
Date: Tue, 26 May 2026 12:06:27 +0200
Subject: [PATCH] caddy: enable websockets for authentik

---
 kubernetes/system/caddy/caddyfile.yaml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/kubernetes/system/caddy/caddyfile.yaml b/kubernetes/system/caddy/caddyfile.yaml
index d0cc347..b712913 100644
--- a/kubernetes/system/caddy/caddyfile.yaml
+++ b/kubernetes/system/caddy/caddyfile.yaml
@@ -38,7 +38,10 @@ data:
         @umami       host umami.vhaudiquet.fr
 
         handle @authentik {
-            reverse_proxy traefik.traefik.svc.cluster.local:80
+            reverse_proxy traefik.traefik.svc.cluster.local:80 {
+                header_up Connection {>Connection}
+                header_up Upgrade {>Upgrade}
+            }
         }
         handle @auth-nook {
             reverse_proxy traefik.traefik.svc.cluster.local:80