From 9ff7b4b913b491cc324d8eaf5d68b82b4dca1a6e Mon Sep 17 00:00:00 2001
From: tolerryan <ryan.toler@gmail.com>
Date: Mon, 28 Sep 2026 00:12:55 +0000
Subject: [PATCH] bypass graphql and login directories from authelia forced
 auth

---
 roles/authelia/templates/Caddyfile.j2 | 16 ++++++++++++----
 1 file changed, 12 insertions(+), 4 deletions(-)

diff --git a/roles/authelia/templates/Caddyfile.j2 b/roles/authelia/templates/Caddyfile.j2
index f55ba26..bc4882e 100644
--- a/roles/authelia/templates/Caddyfile.j2
+++ b/roles/authelia/templates/Caddyfile.j2
@@ -27,11 +27,19 @@ git.frantecrt.duckdns.org {
 }
 
 wikijs.frantecrt.duckdns.org {
-    # Import the auth configuration block
-    import authelia_auth
+    @bypass_auth {
+        path /graphql*
+        path /login*
+    }
 
-    # Route the traffic to your backend application if authenticated
-    reverse_proxy wikijs.netbird.cloud:3000
+    handle @bypass_auth {
+        reverse_proxy wikijs.netbird.cloud:3000
+    }
+
+    handle {
+        import authelia_auth
+        reverse_proxy wikijs.netbird.cloud:3000
+    }
 }
 
 vault.frantecrt.duckdns.org {