(authentik_forward_auth) {
  reverse_proxy /outpost.goauthentik.io/* http://127.0.0.1:9000

  forward_auth http://127.0.0.1:9000 {
    uri /outpost.goauthentik.io/auth/caddy
    copy_headers X-Authentik-Username X-Authentik-Groups X-Authentik-Email X-Authentik-Name X-Authentik-Uid X-Authentik-Jwt
    trusted_proxies private_ranges
  }
}