From fc673c8d8ec7beea6330c9e7fe6a6636a90fd721 Mon Sep 17 00:00:00 2001
From: Leo Vasanko <git@vasanko.com>
Date: Sat, 27 Sep 2025 03:00:56 +0000
Subject: [PATCH] Support auth request for WebSocket connections (using plain
 HTTP for auth). Use keep-alive for better performance.

---
 caddy/auth/require | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/caddy/auth/require b/caddy/auth/require
index 917df34..1602cc6 100644
--- a/caddy/auth/require
+++ b/caddy/auth/require
@@ -2,6 +2,8 @@
 # is different depending on the route (otherwise use auth/all).
 forward_auth {$AUTH_UPSTREAM:localhost:4401} {
     uri /auth/api/forward?{args[0]}
+    header_up Connection keep-alive  # Much higher performance
+    header_up -Upgrade  # Disable Upgrade: WebSocket
     copy_headers {
         Remote-User
         Remote-Name