Is adding a first auth layer a good idea?
I use Caddy as a reverse proxy, so I only need to expose one port. Each subdomain routes to a different Docker app like Gitea, Immich, Home Assistant, and Mealie.
All of these apps already have their own authentication, but I recently added a separate authentication layer in front of everything.
It works fine for browser access, but causes some issues:
git clonefails because Git can't handle the extra auth flow.- The Immich Android app fails for the same reason.
I could bypass the extra auth for certain paths like Git or API endpoints, but now I'm wondering if having two auth layers is actually a good idea when they can interfere with apps.
How do you handle this?