tailscale_auth seems not to work with tailscale+tls

[tmaier]

This is my Caddyfile:

{
	order tailscale_auth after basicauth
	auto_https off
}

:80 {
	bind tailscale/dms-foo
	tailscale_auth
	reverse_proxy webserver-foo:8000

:443 {
	bind tailscale+tls/dms-foo
	tailscale_auth
	reverse_proxy webserver-foo:8000
}

curling the HTTP version returns 200, while the HTTPS version returns 401:

$ curl https://dms-foo.my-tailnet.ts.net -I
HTTP/1.1 401 Unauthorized
Server: Caddy
Date: Sat, 30 Dec 2023 21:53:52 GMT

$ curl http://dms-foo.my-tailnet.ts.net -I
HTTP/1.1 200 OK
...
Server: Caddy
...

[tmaier]

I created a PoC, which shows that tailscale+tls + tailscale_auth do not work together.

See https://gist.github.com/tmaier/0a79b054b4bc69bb47320432017d1367

I would appreciate, if you could continue iterating on this plugin. It looks really promising!

[willnorris]

I think the recent config code changes may have fixed this. At least, my current sample here is working well for me. Could you test again with the latest changes and see if this has been fixed?