diff --git a/client/components/ui/TextInput.vue b/client/components/ui/TextInput.vue
index c347eea30..189917d39 100644
--- a/client/components/ui/TextInput.vue
+++ b/client/components/ui/TextInput.vue
@@ -116,4 +116,4 @@ input:read-only {
 input::-webkit-calendar-picker-indicator {
   filter: invert(1);
 }
-</style>
\ No newline at end of file
+</style>
diff --git a/client/pages/config/index.vue b/client/pages/config/index.vue
index 673911415..1d825f2a2 100644
--- a/client/pages/config/index.vue
+++ b/client/pages/config/index.vue
@@ -51,6 +51,54 @@
             <ui-dropdown v-model="newServerSettings.metadataFileFormat" small :items="metadataFileFormats" label="Metadata File Format" @input="updateMetadataFileFormat" :disabled="updatingServerSettings" />
           </div>
 
+          <div class="pt-4">
+            <h2 class="font-semibold">{{ $strings.HeaderSettingsProxyAuth }}</h2>
+          </div>
+
+          <div class="flex items-end py-2">
+            <ui-toggle-switch labeledBy="settings-enable-proxy-auth" v-model="newServerSettings.proxyAuthEnabled" :disabled="updatingServerSettings" @input="(val) => updateSettingsKey('proxyAuthEnabled', val)" />
+            <ui-tooltip :text="$strings.LabelSettingsEnableProxyAuthHelp">
+              <p class="pl-4">
+                <span id="settings-enable-proxy-auth">{{ $strings.LabelSettingsEnableProxyAuth }}</span>
+                <span class="material-icons icon-text">info_outlined</span>
+              </p>
+            </ui-tooltip>
+          </div>
+
+          <div class="flex-grow py-2" v-if="newServerSettings.proxyAuthEnabled">
+            <div class="flex items-center">
+              <label for="settings-proxy-auth-user-header" class="text-sm font-semibold px-1">
+                {{ $strings.LabelSettingsProxyAuthUsernameHeader }}
+              </label>
+              <ui-tooltip :text="$strings.LabelSettingsProxyAuthUsernameHeaderHelp">
+                <span class="material-icons icon-text">info_outlined</span>
+              </ui-tooltip>
+            </div>
+
+            <div class="relative w-full max-w-52">
+              <ui-text-input inputId="settings-proxy-auth-user-header" :disabled="updatingServerSettings" v-model="newServerSettings.proxyAuthUsernameHeader" @change="(val) => updateSettingsKey('proxyAuthUsernameHeader', val)" />
+            </div>
+
+            <p class="text-xs ml-1 text-white text-opacity-60">{{ $strings.LabelExample }}: X-Authentik-Username</p>
+          </div>
+
+          <div class="flex-grow py-2" v-if="newServerSettings.proxyAuthEnabled">
+            <div class="flex items-center">
+              <label for="settings-proxy-auth-email-header" class="text-sm font-semibold px-1">
+                {{ $strings.LabelSettingsProxyAuthEmailHeader }}
+              </label>
+              <ui-tooltip :text="$strings.LabelSettingsProxyAuthEmailHeaderHelp">
+                <span class="material-icons icon-text">info_outlined</span>
+              </ui-tooltip>
+            </div>
+
+            <div class="relative w-full max-w-52">
+              <ui-text-input inputId="settings-proxy-auth-email-header" :disabled="updatingServerSettings" v-model="newServerSettings.proxyAuthEmailHeader" @change="(val) => updateSettingsKey('proxyAuthEmailHeader', val)" />
+            </div>
+
+            <p class="text-xs ml-1 text-white text-opacity-60">{{ $strings.LabelExample }}: X-Authentik-Email</p>
+          </div>
+
           <div class="pt-4">
             <h2 class="font-semibold">{{ $strings.HeaderSettingsDisplay }}</h2>
           </div>
diff --git a/client/strings/en-us.json b/client/strings/en-us.json
index 158127662..c04d29c5f 100644
--- a/client/strings/en-us.json
+++ b/client/strings/en-us.json
@@ -145,6 +145,7 @@
   "HeaderSession": "Session",
   "HeaderSetBackupSchedule": "Set Backup Schedule",
   "HeaderSettings": "Settings",
+  "HeaderSettingsProxyAuth": "Proxy Authentication",
   "HeaderSettingsDisplay": "Display",
   "HeaderSettingsExperimental": "Experimental Features",
   "HeaderSettingsGeneral": "General",
@@ -399,6 +400,8 @@
   "LabelSettingsDisableWatcher": "Disable Watcher",
   "LabelSettingsDisableWatcherForLibrary": "Disable folder watcher for library",
   "LabelSettingsDisableWatcherHelp": "Disables the automatic adding/updating of items when file changes are detected. *Requires server restart",
+  "LabelSettingsEnableProxyAuth": "Enable Proxy Authentication",
+  "LabelSettingsEnableProxyAuthHelp": "Enable this setting if authentication happens in your reverse proxy. You'll be prompted for headers that supply user info.",
   "LabelSettingsEnableWatcher": "Enable Watcher",
   "LabelSettingsEnableWatcherForLibrary": "Enable folder watcher for library",
   "LabelSettingsEnableWatcherHelp": "Enables the automatic adding/updating of items when file changes are detected. *Requires server restart",
@@ -420,6 +423,10 @@
   "LabelSettingsPreferMatchedMetadataHelp": "Matched data will override item details when using Quick Match. By default Quick Match will only fill in missing details.",
   "LabelSettingsPreferOPFMetadata": "Prefer OPF metadata",
   "LabelSettingsPreferOPFMetadataHelp": "OPF file metadata will be used for book details over folder names",
+  "LabelSettingsProxyAuthUsernameHeader": "Username Header",
+  "LabelSettingsProxyAuthUsernameHeaderHelp": "Name of the header (added by the proxy) containing the username",
+  "LabelSettingsProxyAuthEmailHeader": "Email Address Header",
+  "LabelSettingsProxyAuthEmailHeaderHelp": "Name of the header (added by the proxy) containing the user email address",
   "LabelSettingsSkipMatchingBooksWithASIN": "Skip matching books that already have an ASIN",
   "LabelSettingsSkipMatchingBooksWithISBN": "Skip matching books that already have an ISBN",
   "LabelSettingsSortingIgnorePrefixes": "Ignore prefixes when sorting",