From c6a039cc50c387f871a413114c27c5711060f176 Mon Sep 17 00:00:00 2001
From: Leo Vasanko <leo@git>
Date: Fri, 26 Sep 2025 15:00:56 -0600
Subject: [PATCH] Support auth request for WebSocket connections (using plain
 HTTP for auth). Use keep-alive for better performance.

---
 caddy/auth/require | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/caddy/auth/require b/caddy/auth/require
index 917df34..1602cc6 100644
--- a/caddy/auth/require
+++ b/caddy/auth/require
@@ -2,6 +2,8 @@
 # is different depending on the route (otherwise use auth/all).
 forward_auth {$AUTH_UPSTREAM:localhost:4401} {
     uri /auth/api/forward?{args[0]}
+    header_up Connection keep-alive  # Much higher performance
+    header_up -Upgrade  # Disable Upgrade: WebSocket
     copy_headers {
         Remote-User
         Remote-Name