traefik fixed hass

traefik/conf.d/rules.yml

@@ -19,13 +19,6 @@ http:
          - X-authentik-meta-app
          - X-authentik-meta-version
   routers:
-    hass-router:
-      entryPoints:
-        - "hass"
-      rule: "Host(`home.thoster.net`) && PathPrefix(`/`)"
-      service: hass-service
-      tls:
-        certResolver: letsencrypt
     paperless-router:
       entryPoints:
        - "websecure"
@@ -43,17 +36,9 @@ http:
       service: jellyfin-service
       tls:
         certResolver: letsencrypt
-    hass-router-auth:
-      entryPoints:
-       - "websecure"
-      rule: "Host(`hass.home.thoster.net`) && PathPrefix(`/outpost.goauthentik.io/`)"
-      priority: 15
-      service: authentik
-      tls:
-        certResolver: letsencrypt
     paperless-router-auth:
       entryPoints:
-       - "websecure"
+        - "websecure"
       rule: "Host(`pl.home.thoster.net`) && PathPrefix(`/outpost.goauthentik.io/`)"
       priority: 15
       service: authentik
@@ -64,7 +49,7 @@ http:
         - "websecure"
       rule: "Host(`home.thoster.net`) && PathPrefix(`/`)"
       middlewares:
-       - middlewares-authentik
+        - middlewares-authentik
       service: wikimd-service
       tls:
         certResolver: letsencrypt
@@ -81,13 +66,13 @@ http:
         - "websecure"
       rule: "Host(`comfy.home.thoster.net`) && PathPrefix(`/`)"
       middlewares:
-       - middlewares-authentik
+        - middlewares-authentik
       service: comfy-service
       tls:
         certResolver: letsencrypt
     comfy-router-auth:
       entryPoints:
-       - "websecure"
+        - "websecure"
       rule: "Host(`comfy.home.thoster.net`) && PathPrefix(`/outpost.goauthentik.io/`)"
       priority: 15
       service: authentik
@@ -107,15 +92,34 @@ http:
       service: auth-service
       tls:
         certResolver: letsencrypt
-    hass2-router:
+    hass-router-secure:
+      entryPoints:
+        - "websecure"
+      rule: "Host(`hass.home.thoster.net`) && PathPrefix(`/auth/`) && !PathPrefix(`/auth/token`) "
+      priority: 14
+      middlewares:
+        - middlewares-authentik
+      service: hass-service
+      tls:
+        certResolver: letsencrypt
+    hass-router:
       entryPoints:
         - "websecure"
       rule: "Host(`hass.home.thoster.net`) && PathPrefix(`/`)"
-      middlewares:
-        - "middlewares-authentik"
+      priority: 10
+#      middlewares:
+#        - middlewares-authentik
       service: hass-service
       tls:
         certResolver: letsencrypt
+    hass-router-auth:
+      entryPoints:
+        - "websecure"
+      rule: "Host(`hass.home.thoster.net`) && PathPrefix(`/outpost.goauthentik.io/`)"
+      priority: 15
+      service: authentik
+      tls:
+        certResolver: letsencrypt
     nas-router:
       entryPoints:
         - "websecure"