From 5f46872c67bae2a9858521febd1d79b208e56820 Mon Sep 17 00:00:00 2001
From: selfhoster1312 <selfhoster1312@kl.netlib.re>
Date: Fri, 13 Jan 2023 10:27:18 +0100
Subject: [PATCH] Enable SSO auth (does not prevent Subsonic API on 'public'
 mode)

---
 conf/navidrome.toml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/conf/navidrome.toml b/conf/navidrome.toml
index cf87b68..4b59058 100644
--- a/conf/navidrome.toml
+++ b/conf/navidrome.toml
@@ -96,3 +96,8 @@ EnableExternalServices = "true"
 
 # Set the language by default
 DefaultLanguage="__LANGUAGE__"
+
+# Enable SSOWat authentication for all IP addresses
+# If SSOWat didn't authenticate a user, manual login will still work (eg. for API)
+ReverseProxyUserHeader = "remote-user"
+ReverseProxyWhitelist = "0.0.0.0/0"