traefik forward auth

README.md

@@ -118,7 +118,7 @@ In Mistborn, Gateways are upstream from the VPN server so connections to third-p
 The Gateway adds an extra network hop. DNS is still resolved in Mistborn so pihole is still blocking ads.
 
 # Installation
-Mistborn is regularly tested on Ubuntu 18.04 LTS (DigitalOcean droplet with 2 GB RAM). It has also been successfully used on Debian Buster and Raspbian Buster systems (though not regularly tested). Additionally tested on Ubuntu 20.04 LTS.
+Mistborn is regularly tested on Ubuntu 20.04 LTS (DigitalOcean droplet with 2 GB RAM). It has also been successfully used on Debian Buster and Raspbian Buster systems (though not regularly tested). Make sure to install OS updates and restart before installing Mistborn (Wireguard installs differently on recent kernels).
 
 Clone the git repository and run the install script:
 ```

base.yml

@@ -12,6 +12,8 @@ services:
     depends_on:
       - postgres
       - redis
+    ports:
+      - "10.2.3.1:5000:5000/tcp" # auth access
     labels:
       - "traefik.enable=true"
       - "traefik.http.routers.django-http.rule=Host(`home.mistborn`)"

compose/production/traefik/dynamic.toml

@@ -22,7 +22,7 @@
 
 [http.middlewares]
   [http.middlewares.mistborn_auth.forwardAuth]
-    address = "https://home.mistborn/auth/"
+    address = "http://10.2.3.1:5000/auth/"
     trustForwardHeader = true
     [http.middlewares.mistborn_auth.forwardAuth.tls]
       insecureSkipVerify = true