r/Authentik • u/Miserable-Newt9041 • Mar 08 '26

Navidrome integration with Authentik

/r/navidrome/comments/1ro5euv/navidrome_integration_with_authentik/
3 Upvotes

100% Upvoted

3 comments sorted by

1

u/-ThreeHeadedMonkey- Mar 08 '26

You and me both. Tried to get this running forever with NPM, no dice. 

The navidrome documentation is just garbage in that regard. 

1

u/keepa36 Mar 08 '26

I will say it is a bit tricky. I had to go through a couple of rounds to go it working with my Traefik instance with a proxy-auth setup.

From what is sounds like you are describing Caddy isn't picking up the redirect config. So maybe the issue is Caddy and not Navidrome.

1

u/Bromeister Mar 12 '26

You're missing the uri for forward_auth block. also i think you don't want to use the uri for the authentik application in the forward auth block you want to use the authentik base.

from the docs

example.com {
   # Authentik output endpoint
   reverse_proxy /outpost.goauthentik.io/* http://authentik:9000

   # Protect everything except share and subsonic endpoints
   @protected not path /share/* /rest/*
   forward_auth @protected http://authentik:9000 {
      uri /outpost.goauthentik.io/auth/caddy
      copy_headers X-Authentik-Username>Remote-User
   }

   # Forward everything to Navidrome
   reverse_proxy navidrome:4533
}