I am not sure how it works with authentik and the navidrome mobile apps, but I with Authelia and Immich, I basically had to add a header bypass to the traefik config and in the immich mobile app, maybe something similar is possible?
this post was submitted on 21 Nov 2025
21 points (95.7% liked)
Selfhosted
61409 readers
712 users here now
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.
Rules:
-
Be civil.
-
No spam.
-
Posts are to be related to self-hosting.
-
Don't duplicate the full text of your blog or readme if you're providing a link.
-
Submission headline should match the article title.
-
No trolling.
-
Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.
-
AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.
Resources:
- selfh.st Newsletter and index of selfhosted software and apps
- awesome-selfhosted software
- awesome-sysadmin resources
- Self-Hosted Podcast from Jupiter Broadcasting
Any issues on the community? Report it using the report flag.
Questions? DM the mods!
founded 3 years ago
MODERATORS
Thanks, I will look into this
Here's my config for Authelia, maybe it helps:
- domain: music.server.home
policy: bypass
resources:
- '^/rest.*'
- '^/api.*'
- domain: music.server.home
policy: one_factor
I have mine only internal so i haven't ran into that. But check console. You mention mobile so if you're on android you can hook it up to your pc and use debugging through chrome.. In the past I've had success looking at error messages to see why my requests were failing. Usually because i wasn't passing headers correctly.
I use symfonium and it looks like it let's you pass custom headers if needed. Good luck
In the end, when I was setting it up, I realized that the only apps I use to connect and listen are using the rest API and I never got that one to work when I was setting it up. I had to bypass rest API endpoints like other poster here and create internal users in navidrome to keep some kind of security.
I would love someone posting up to date guide how to do it properly.
In the end problem was with the Subsonic Api and and the fact that I did not know how to implement subsonic authentication scheme on my proxy (caddy).