From 924365da8befc92903a2dffa32a5cd9b9660fde5 Mon Sep 17 00:00:00 2001
From: chris <chris@kruining.eu>
Date: Thu, 16 Oct 2025 12:14:08 +0000
Subject: [PATCH] too lazy to think of a message, so enjoy this pointless text.
 Good luck future me...

---
 clanServices/zitadel/default.nix | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)

diff --git a/clanServices/zitadel/default.nix b/clanServices/zitadel/default.nix
index 7edf795..441fd33 100644
--- a/clanServices/zitadel/default.nix
+++ b/clanServices/zitadel/default.nix
@@ -129,6 +129,23 @@ in
             }
           ];
         };
+
+        services.caddy = {
+          enable = true;
+          virtualHosts = {
+            "auth.amarth.cloud".extraConfig = ''
+              reverse_proxy h2c://127.0.0.1:9092
+            '';
+          };
+          extraConfig = ''
+            (auth-z) {
+              forward_auth h2c://127.0.0.1:9092 {
+                uri /api/authz/forward-auth
+                copy_headers Remote-User Remote-Groups Remote-Email Remote-Name
+              }
+            }
+          '';
+        };
       };
     };
   };