diff --git a/flake.lock b/flake.lock
index 1995129..794f3c6 100644
--- a/flake.lock
+++ b/flake.lock
@@ -2,11 +2,11 @@
   "nodes": {
     "crane": {
       "locked": {
-        "lastModified": 1775236976,
-        "narHash": "sha256-gCgX+AXN7K1gAIEqcLcZHxmC+QoZcwn9m6Z9r2Az+N8=",
+        "lastModified": 1775839657,
+        "narHash": "sha256-SPm9ck7jh3Un9nwPuMGbRU04UroFmOHjLP56T10MOeM=",
         "owner": "ipetkov",
         "repo": "crane",
-        "rev": "6c23998526351a53ce734f0ac84940da988ccef1",
+        "rev": "7cf72d978629469c4bd4206b95c402514c1f6000",
         "type": "github"
       },
       "original": {
@@ -40,11 +40,11 @@
         "nixpkgs": "nixpkgs"
       },
       "locked": {
-        "lastModified": 1775788654,
-        "narHash": "sha256-vMZIDlF//N0TVEg0jJR5hKtInIkBTbnX+RG4MJv5Dpw=",
+        "lastModified": 1775856841,
+        "narHash": "sha256-wNR1kmbcgBtUaXmP8HIwuyiF1YQQ8twDWfjet9LSe5U=",
         "ref": "refs/heads/main",
-        "rev": "e445f8631b22d052cbd69ac59c6490cdf540ee2c",
-        "revCount": 67,
+        "rev": "ae3bd23e4b2e8dd4d3cb939ff13ac300660863e0",
+        "revCount": 101,
         "type": "git",
         "url": "https://git.ily.rs/lew/guestbook"
       },
@@ -55,11 +55,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1775763530,
-        "narHash": "sha256-BuTK9z1QEwWPOIakQ1gCN4pa4VwVJpfptYCviy2uOGc=",
+        "lastModified": 1775793324,
+        "narHash": "sha256-omax7atcZbol+6HJ2RLpP+ZCFcPa5bZ65Hn71RufeWQ=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "b0188973b4b2a5b6bdba8b65381d6cd09a533da0",
+        "rev": "9d29d5f667d7467f98efc31881e824fa586c927e",
         "type": "github"
       },
       "original": {
diff --git a/hosts/lab/guestbook.nix b/hosts/lab/guestbook.nix
index c3a7edb..4e97c83 100644
--- a/hosts/lab/guestbook.nix
+++ b/hosts/lab/guestbook.nix
@@ -12,6 +12,12 @@
     caddy = {
       enable = true;
       domain = "g.ily.rs";
+      forwardAuth = {
+      	enable = true;
+	address = "localhost:3002";
+	uri = "/api/auth/caddy";
+	copyHeaders = [ "Remote-User" "Remote-Name" "Remote-Email" "Remote-Groups" ];
+      };
     };
 
     features = {