I am not sure how it works with authentik and the navidrome mobile apps, but I with Authelia and Immich, I basically had to add a header bypass to the traefik config and in the immich mobile app, maybe something similar is possible?
this post was submitted on 21 Nov 2025
22 points (95.8% liked)
Selfhosted
53408 readers
162 users here now
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.
Rules:
-
Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.
-
No spam posting.
-
Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.
-
Don't duplicate the full text of your blog or github here. Just post the link for folks to click.
-
Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).
-
No trolling.
-
No low-effort posts. This is subjective and will largely be determined by the community member reports.
Resources:
- selfh.st Newsletter and index of selfhosted software and apps
- awesome-selfhosted software
- awesome-sysadmin resources
- Self-Hosted Podcast from Jupiter Broadcasting
Any issues on the community? Report it using the report flag.
Questions? DM the mods!
founded 2 years ago
MODERATORS
Thanks, I will look into this
Here's my config for Authelia, maybe it helps:
- domain: music.server.home
policy: bypass
resources:
- '^/rest.*'
- '^/api.*'
- domain: music.server.home
policy: one_factor
I have mine only internal so i haven't ran into that. But check console. You mention mobile so if you're on android you can hook it up to your pc and use debugging through chrome.. In the past I've had success looking at error messages to see why my requests were failing. Usually because i wasn't passing headers correctly.
I use symfonium and it looks like it let's you pass custom headers if needed. Good luck
In the end, when I was setting it up, I realized that the only apps I use to connect and listen are using the rest API and I never got that one to work when I was setting it up. I had to bypass rest API endpoints like other poster here and create internal users in navidrome to keep some kind of security.
I would love someone posting up to date guide how to do it properly.
In the end problem was with the Subsonic Api and and the fact that I did not know how to implement subsonic authentication scheme on my proxy (caddy).