Claude 9aacb17a4d Pin X-Forwarded-Host on the Authelia portal's own Caddy block ...

The generated auth.<domain> block's bare "reverse_proxy authelia:9091"
let Caddy recompute X-Forwarded-Host from its own incoming request
(always auth.<domain> itself) on every hop through it, overwriting
whatever a forward_auth caller elsewhere had already set for its own
domain. Confirmed live: a remote site's forward_auth check always
evaluated as if it were for the Authelia portal itself (bypass policy),
so 2FA silently never triggered for any domain going through it.

2026-07-20 22:31:07 +00:00

..

actualbudget.sh

fix(services): conditional caddy_net across all Docker service scripts

2026-06-20 04:16:41 +00:00

ai-gpu.sh

ai-stack: vendor the local-ai full AI stack as a new service

2026-06-26 12:41:44 +00:00

ai-stack.sh

ai-stack: add optional GPU switcher and clarify frontend roles

2026-06-26 12:56:11 +00:00

archivebox.sh

fix(services): conditional caddy_net across all Docker service scripts

2026-06-20 04:16:41 +00:00

arm.sh

fix(services): conditional caddy_net across all Docker service scripts

2026-06-20 04:16:41 +00:00

asterisk-digital-ocean.sh

Hardcode X-Forwarded-Host in remote-Authelia forward_auth, not {host}

2026-07-20 21:06:06 +00:00

asterisk.sh

Fix: closing the web admin port to the internet also blocked Caddy

2026-07-20 18:24:02 +00:00

audiobookshelf.sh

fix(services): conditional caddy_net across all Docker service scripts

2026-06-20 04:16:41 +00:00

authelia.sh

Pin X-Forwarded-Host on the Authelia portal's own Caddy block

2026-07-20 22:31:07 +00:00

backup.sh

Add remote Caddy support — generate snippet files when Caddy is on another host

2026-06-09 00:28:30 +00:00

base.sh

Offer Caddy and CrowdSec as recommended installs in base.sh

2026-07-20 13:45:24 +00:00

borg-backup.sh

fix dispatcher hyphen bug in 4 more services

2026-06-26 13:20:49 +00:00

caddy.sh

Rename asterisk-do service to asterisk-digital-ocean

2026-07-20 13:57:35 +00:00

calibre-web.sh

fix dispatcher hyphen bug in 4 more services

2026-06-26 13:20:49 +00:00

changedetection.sh

fix(services): conditional caddy_net across all Docker service scripts

2026-06-20 04:16:41 +00:00

crowdsec.sh

Rename asterisk-do service to asterisk-digital-ocean

2026-07-20 13:57:35 +00:00

ddclient.sh

Add remote Caddy support — generate snippet files when Caddy is on another host

2026-06-09 00:28:30 +00:00

drum-rhythm-game.sh

fix(services): conditional caddy_net across all Docker service scripts

2026-06-20 04:16:41 +00:00

emby.sh

fix(services): conditional caddy_net across all Docker service scripts

2026-06-20 04:16:41 +00:00

filebrowser.sh

fix(services): conditional caddy_net for filebrowser, homebox, watchtower

2026-06-20 04:06:51 +00:00

fmd.sh

fix(services): conditional caddy_net across all Docker service scripts

2026-06-20 04:16:41 +00:00

frigate-audio.sh

fix(services): conditional caddy_net across all Docker service scripts

2026-06-20 04:16:41 +00:00

frigate-notify.sh

fix(services): conditional caddy_net across all Docker service scripts

2026-06-20 04:16:41 +00:00

frigate.sh

frigate.sh: detect existing camera config, offer keep/backup/add/remove

2026-07-01 20:25:55 +00:00

gaming-backup.sh

fix dispatcher hyphen bug in 4 more services

2026-06-26 13:20:49 +00:00

gatus.sh

fix(services): conditional caddy_net across all Docker service scripts

2026-06-20 04:16:41 +00:00

homeassistant.sh

fix(services): conditional caddy_net across all Docker service scripts

2026-06-20 04:16:41 +00:00

homebox.sh

fix(services): conditional caddy_net for filebrowser, homebox, watchtower

2026-06-20 04:06:51 +00:00

immich.sh

fix(services): conditional caddy_net across all Docker service scripts

2026-06-20 04:16:41 +00:00

iopaint.sh

fix(services): conditional caddy_net across all Docker service scripts

2026-06-20 04:16:41 +00:00

jellyfin.sh

fix(services): conditional caddy_net across all Docker service scripts

2026-06-20 04:16:41 +00:00

joplin.sh

fix(services): conditional caddy_net across all Docker service scripts

2026-06-20 04:16:41 +00:00

js99er.sh

fix(js99er): missing write_readme stub + conditional caddy_net

2026-06-20 03:49:53 +00:00

kdeconnect.sh

services: add KDE Connect phone/desktop integration

2026-06-08 17:01:36 +00:00

koha.sh

fix(services): conditional caddy_net across all Docker service scripts

2026-06-20 04:16:41 +00:00

kyber-launcher.sh

kyber-server: prompt for manual SWBF2 path if not found via Steam

2026-06-26 02:33:26 +00:00

kyber-server.sh

kyber-server: fix Wine crash + map rotation format

2026-06-26 15:26:55 +00:00

lyrion.sh

fix(services): conditional caddy_net across all Docker service scripts

2026-06-20 04:16:41 +00:00

magicmirror.sh

fix(services): conditional caddy_net across all Docker service scripts

2026-06-20 04:16:41 +00:00

mail-archiver.sh

fix(services): conditional caddy_net across all Docker service scripts

2026-06-20 04:16:41 +00:00

mattermost.sh

fix(services): conditional caddy_net across all Docker service scripts

2026-06-20 04:16:41 +00:00

mealie.sh

fix(services): conditional caddy_net across all Docker service scripts

2026-06-20 04:16:41 +00:00

meshcentral.sh

fix(services): conditional caddy_net across all Docker service scripts

2026-06-20 04:16:41 +00:00

minecraft.sh

Add remote Caddy support — generate snippet files when Caddy is on another host

2026-06-09 00:28:30 +00:00

n8n.sh

fix(services): conditional caddy_net across all Docker service scripts

2026-06-20 04:16:41 +00:00

nextcloud.sh

fix(services): conditional caddy_net across all Docker service scripts

2026-06-20 04:16:41 +00:00

ntfy.sh

fix(services): conditional caddy_net across all Docker service scripts

2026-06-20 04:16:41 +00:00

onlyoffice.sh

fix(services): conditional caddy_net across all Docker service scripts

2026-06-20 04:16:41 +00:00

paintplus.sh

paintplus: add ai-stack InvokeAI/ComfyUI as a local backend option

2026-06-26 13:20:43 +00:00

portainer.sh

fix(services): conditional caddy_net across all Docker service scripts

2026-06-20 04:16:41 +00:00

rustdesk.sh

Add remote Caddy support — generate snippet files when Caddy is on another host

2026-06-09 00:28:30 +00:00

silent-send.sh

Add remote Caddy support — generate snippet files when Caddy is on another host

2026-06-09 00:28:30 +00:00

sky-cam.sh

sky-cam: add retry-on-failure to sunrise/seasons/moon jobs

2026-07-08 15:02:36 +00:00

ssh-config.sh

Add SSH Host alias management (base wizard, standalone service, docs)

2026-07-02 16:20:22 +00:00

stirling-pdf.sh

fix dispatcher hyphen bug in 4 more services

2026-06-26 13:20:49 +00:00

sunshine.sh

Fix write_readme missing from standalone bootstrap fallback

2026-06-26 05:07:11 +00:00

sync-cc.sh

Add remote Caddy support — generate snippet files when Caddy is on another host

2026-06-09 00:28:30 +00:00

syncthing.sh

fix(services): conditional caddy_net across all Docker service scripts

2026-06-20 04:16:41 +00:00

traccar.sh

fix(services): conditional caddy_net across all Docker service scripts

2026-06-20 04:16:41 +00:00

unifi.sh

fix(services): conditional caddy_net across all Docker service scripts

2026-06-20 04:16:41 +00:00

uptimekuma.sh

fix(services): conditional caddy_net across all Docker service scripts

2026-06-20 04:16:41 +00:00

vaultwarden.sh

fix(services): conditional caddy_net across all Docker service scripts

2026-06-20 04:16:41 +00:00

watchtower.sh

fix(services): conditional caddy_net for filebrowser, homebox, watchtower

2026-06-20 04:06:51 +00:00

watchyourlan.sh

Add remote Caddy support — generate snippet files when Caddy is on another host

2026-06-09 00:28:30 +00:00

wg-easy.sh

fix(services): conditional caddy_net across all Docker service scripts

2026-06-20 04:16:41 +00:00

wolf-pair.sh

wolf-pair: don't expose the pairing UI publicly when Caddy fronts it

2026-07-20 18:32:40 +00:00

wolf.sh

wolf: persist RetroArch shaders & overlays; back up bios + shaders/overlays

2026-06-23 15:25:56 +00:00