Protect workflow UI with Authelia

[sidey79]

Summary

• Keep the GitHub webhook /webhook/github-pr-dashboard reachable directly
• Protect the browser-facing n8n UI on workflow.* with Authelia forward auth
• Document the split behavior in the README

Notes

• mTLS is still enforced for the non-webhook workflow paths
• I could not run caddy validate locally because caddy is not installed in this environment

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 2f259ac3fa

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[sidey79]

@codex Review this pr again

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: c2532f7590

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[sidey79]

@codex

Es gibt einen Fehler im Caddyfile:

file","file":"/work/Caddyfile"}
Error: adapting config using caddyfile: matcher is defined more than once: @githubPrDashboardUi

Bitte korrigiere diesen Fehler.

[chatgpt-codex-connector]

To use Codex here, create an environment for this repo.

[sidey79]

@codex die Umgebung ist angelegt

[sidey79]

@codex

Es gibt einen Fehler im Caddyfile:

file","file":"/work/Caddyfile"}
Error: adapting config using caddyfile: matcher is defined more than once: @githubPrDashboardUi

Bitte korrigiere diesen Fehler.

[chatgpt-codex-connector]

Summary

• Fixed the Caddy adaptation error by removing the duplicate route-scoped @githubPrDashboardUi matcher from the workflow.* site block, so that block now keeps only the imported matcher definition. CaddyfileL215-L232
• Kept githubPrDashboardUi_base as the single source of truth for the GitHub PR dashboard UI path/method matcher, which is what the route-level matcher now imports. CaddyfileL90-L97 CaddyfileL227-L232
• Committed the change on the current branch as 4b04b87 with message Fix duplicate GitHub dashboard matcher, and created a follow-up PR entry summarizing the fix.

Testing

• ✅ python - <<'PY'\nfrom pathlib import Path\nlines = Path('Caddyfile').read_text().splitlines()\ninside = False\ncount = 0\nfor line in lines:\n if line.startswith('workflow.{$CADDY_SUBDOMAIN} {'):\n inside = True\n continue\n if inside and line == '}':\n break\n if inside and line.strip() == '@githubPrDashboardUi {':\n count += 1\nprint(f'workflow_matcher_definitions={count}')\nPY — confirmed workflow_matcher_definitions=1.
• ⚠️ which caddy || true — caddy is not installed in this environment, so I could not run caddy validate.

View task →