feat(auth): support reverse-proxy driven proxy auth

Closes HP-353.
This commit is contained in:
Aarnav Tale
2026-06-20 11:40:46 -04:00
parent c7822e3ec2
commit 96f2721272
24 changed files with 837 additions and 75 deletions
+2 -2
View File
@@ -58,8 +58,8 @@ The following configuration options in Headplane are treated as secret paths:
- _Note:_ Either `cookie_secret` or `cookie_secret_path` must be provided for web session security.
- **Headscale Connection Settings (`headscale.*`):**
- `api_key_path` (Headscale API key for server-side operations like OIDC and agent sync)
- _Note:_ Either `api_key` or `api_key_path` must be provided when using OIDC or the agent.
- `api_key_path` (Headscale API key for server-side operations like OIDC, proxy authentication, and agent sync)
- _Note:_ Either `api_key` or `api_key_path` must be provided when using OIDC, proxy authentication, or the agent.
- `tls_cert_path` (custom TLS certificate for connecting to Headscale)
- _Note:_ This is treated as a regular path, not a secret path, so it will not have its content loaded.