diff --git a/docs/REVERSE_PROXY.md b/docs/REVERSE_PROXY.md index 01fe2b61..676f13d2 100755 --- a/docs/REVERSE_PROXY.md +++ b/docs/REVERSE_PROXY.md @@ -572,6 +572,10 @@ The Traffic Flow will therefore be as follows: - GraphQL: Client accesses `https://authentik.MYDOMAIN.TLD:20212` -> reverse Proxy to internal Port 20219 (NetAlertX GraphQL - unencrypted) - Authentik Outpost: Client accesses `https://authentik.MYDOMAIN.TLD:9443` -> reverse Proxy to internal Port 6000 (Authentik Outpost Proxy - unencrypted) +An Overview of the Flow is provided in the Picture below: + + + ### Security Considerations #### Caddy should be run rootless > [!WARNING] diff --git a/docs/img/REVERSE_PROXY/reverse_proxy_flow.drawio b/docs/img/REVERSE_PROXY/reverse_proxy_flow.drawio new file mode 100644 index 00000000..d0466c3e --- /dev/null +++ b/docs/img/REVERSE_PROXY/reverse_proxy_flow.drawio @@ -0,0 +1,202 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/docs/img/REVERSE_PROXY/reverse_proxy_flow.png b/docs/img/REVERSE_PROXY/reverse_proxy_flow.png new file mode 100644 index 00000000..18828e6b Binary files /dev/null and b/docs/img/REVERSE_PROXY/reverse_proxy_flow.png differ diff --git a/docs/img/REVERSE_PROXY/reverse_proxy_flow.svg b/docs/img/REVERSE_PROXY/reverse_proxy_flow.svg new file mode 100644 index 00000000..8577959a --- /dev/null +++ b/docs/img/REVERSE_PROXY/reverse_proxy_flow.svg @@ -0,0 +1,3 @@ + + +NetAlertX PodNetAlertX PodWeb UI(NGINX + PHP)Web UI...API GraphQL(Python)API GraphQL...4434432021220212Authentik SSO for Web UIAuthentik SSO for...94439443NetAlertXNetAlertXAuthentik Outpost ProxyAuthentik Outpost ProxyCaddyCaddyWeb UI(NGINX + PHP)Web UI...API GraphQL(Python)API GraphQL...Authenticated & Authorized ?Authenticated & Aut...20211202112021920219HTTPSHTTPSHTTPSHTTPSHTTPSHTTPSNONOYESYESHTTPHTTPHTTPHTTPTLS TerminationTLS Termina...TLS TerminationTLS Termina...Check AuthenticationCheck Authent...TLS TerminationTLS Termina... \ No newline at end of file