# Upstream where your authentik server is hosted. upstream authentik { server authentik:9000; # Improve performance by keeping some connections alive. keepalive 10; } # Upgrade WebSocket if requested, otherwise use keepalive map $http_upgrade $connection_upgrade_keepalive { default upgrade; '' ''; } server { listen 443 ssl; listen [::]:443 ssl; server_name auth.*; include /config/nginx/ssl.conf; client_max_body_size 0; location / { include /config/nginx/proxy.conf; include /config/nginx/resolver.conf; proxy_set_header Connection $connection_upgrade_keepalive; set $upstream_app authentik; set $upstream_port 9000; set $upstream_proto http; proxy_pass $upstream_proto://$upstream_app:$upstream_port; } }