move homeassistant to caddy with authentik

caddy/Caddyfile

@@ -20,7 +20,28 @@ authentik.rik.veenboer.xyz {
 	reverse_proxy /outpost.goauthentik.io/* http://host:19000
 	forward_auth http://host:19000 {
 		uri /outpost.goauthentik.io/auth/caddy?rd={http.request.uri}
-		copy_headers X-Authentik-Username X-Authentik-Groups X-Authentik-Email X-Authentik-Name X-Authentik-Uid X-Authentik-Jwt X-Authentik-Meta-Jwks X-Authentik-Meta-Outpost X-Authentik-Meta-Provider X-Authentik-Meta-App X-Authentik-Meta-Version
+		copy_headers {
+			X-Authentik-Username
+			X-Authentik-Groups
+			X-Authentik-Email
+			X-Authentik-Name
+			X-Authentik-Uid
+			X-Authentik-Jwt
+			X-Authentik-Meta-Jwks
+			X-Authentik-Meta-Outpost
+			X-Authentik-Meta-Provider
+			X-Authentik-Meta-App
+			X-Authentik-Meta-Version
+			X-Authentik-Other
+			X-Authentik-Password
+			X-Authentik-This
+			X-Authentik-What
+			Authorization>X-Custom-Authorization
+			X-Custom-User
+			X-Custom-Password
+			X-User-Header
+			X-Homeassistant-User
+		}
 	}
 }
 
@@ -39,3 +60,10 @@ import proxy photoprism host:2342
 import proxy qbittorrent host:9092
 import proxy esp host:6052
 import proxy dsmr host:8888
+import proxy ha host:8123 # homeassistant
+
+insecure.rik.veenboer.xyz {
+	route {
+		reverse_proxy host:12345
+	}
+}