Yeah, I’m not sure. I know a few people who run their servers behind a reverse proxy. I don’t think the app cares as long as the response is correct and endpoints exposed properly.

I know there is a PR for basic auth that I have not yet rolled in because I need to test it but perhaps you can test this out and let me know?