Cut Doris over to Authentik ingress

ingress/traefik/dynamic/routes.yml

@@ -3,9 +3,26 @@ http:
     auth:
       rule: Host(`auth.paccoco.com`)
       entryPoints: [web]
-      service: authelia
+      service: authentik-outpost
       middlewares:
         - security-headers
+        - auth-host-redirect
+
+    doris-authentik-outpost:
+      rule: Host(`doris.paccoco.com`) && PathPrefix(`/outpost.goauthentik.io/`)
+      priority: 15
+      entryPoints: [web]
+      service: authentik-outpost
+      middlewares:
+        - security-headers
+
+    doris:
+      rule: Host(`doris.paccoco.com`)
+      entryPoints: [web]
+      service: doris-dashboard
+      middlewares:
+        - security-headers
+        - authentik-forwardauth
 
     gitea-authentik-outpost:
       rule: Host(`gitea.paccoco.com`) && PathPrefix(`/outpost.goauthentik.io/`)
@@ -90,6 +107,12 @@ http:
         servers:
           - url: https://technitium-dns-pilot:443
 
+    doris-dashboard:
+      loadBalancer:
+        passHostHeader: true
+        servers:
+          - url: http://10.5.30.7:8787
+
   middlewares:
     authelia-forwardauth:
       forwardAuth:
@@ -124,6 +147,12 @@ http:
         replacement: https://${1}/dashboard/
         permanent: false
 
+    auth-host-redirect:
+      redirectRegex:
+        regex: ^https?://auth\.paccoco\.com(?:/(.*))?$
+        replacement: https://authentik.paccoco.com/${1}
+        permanent: true
+
     security-headers:
       headers:
         frameDeny: true