feat: optional site.yaml 'middlewares' list appended to Ingress middleware annotation

Lets a site opt into extra file-provider middlewares (e.g. authentik-forwardauth to auth-gate a site). Backward-compatible: absent/empty key renders the exact previous annotation.
2026-06-12 13:01:05 +00:00
parent d431fbddb4
commit f1f780f5a3
4 changed files with 12 additions and 1 deletions
@@ -48,6 +48,11 @@ type: static          # static | hugo | mkdocs
 #                     # so they're both un-uploaded AND un-deleted. Use this
 #                     # for large assets managed out-of-band via aws-cli
 #                     # (e.g. media files updated more often than the site code).
+# middlewares:        # extra Traefik FILE-PROVIDER middleware names appended to the
+#   - authentik-forwardauth   # Ingress annotation (after https-redirect,retry-upstream).
+#                     # The middleware must already exist in the traefik-dynamic
+#                     # ConfigMap. Use authentik-forwardauth to auth-gate a site
+#                     # (also requires an Authentik proxy provider + app for the host).
 ```

 `.gitea/workflows/publish.yaml`: