GeoIP for filter internal IPs

[support-tt]

Describe your question/
I created a policy for GeoIP with some countries and the new travel distance feature. I use traefik as my reverse proxy.
My problem now is when I connect from outside my nertwork everything is working but when I connect from internal my IP address is from my internal network 192.168.1.X/24 because my firewall (opnsense) connects me directly to traefik. How can I make a exclusion the the GeoIP doenst block my access from internal ?

I tried to write and expression rule but im now sure how to make it work so that the GeoIP can locate me. I was thinking about changing the client_ip to my external ip but im not sure how in the expression.

Relevant info
Authentik with Traefik as Reverse Proxy

Version and Deployment (please complete the following information):

• authentik version: 2025.2.0
• Deployment: [docker-compose]

[MrBE4R]

Hi,

I'm trying to do relatively the same thing. I did manage to filter the execution of the geoip policy based on the client it with an expression policy :

if not ak_client_ip.is_private:
  return ak_call_policy("minimal-geo-policy").passing
return True

minimal-geo-policy being the name of the geoip policy.
Unfortunately, I can't get the geoip policy to work.