# traefik/dynamic/middlewares.yml

http:
  middlewares:
    dashboard-auth:
      basicAuth:
        users:
          - "admin:$apr1$g4oZDj2C$EKV1bTs/BPcj4PrgVTl.J."

    secure-headers:
      headers:
        sslRedirect: true
        stsSeconds: 31536000
        stsIncludeSubdomains: true
        stsPreload: true
        frameDeny: true
        contentTypeNosniff: true
        browserXssFilter: true

    authelia:
      forwardAuth:
        address: http://authelia:9091/api/authz/forward-auth
        trustForwardHeader: true
        authResponseHeaders:
          - Remote-User
          - Remote-Groups
          - Remote-Name
          - Remote-Email