Caddy proxy to HA works without WAF but fails with it

Third party integrations
1

i have my home assistant instance proxied through Caddy. i have the HA config set like so in configuration.yaml and it works great (192.168.1.32 is my caddy instance):

http:
    use_x_forwarded_for: true
trusted_proxies:
    - 192.168.1.1
    - 192.168.1.32

however i just recently installed GitHub - WildeTechSolutions/geo-asn-auth · GitHub to give me geo-blocking and other WAF functions. the HA portion of the Caddyfile is like this:

# Define reusable snippet
(geoblock) {
    forward_auth 10.10.0.10:9876 {
        uri /verify
        copy_headers X-Geo-Country X-Geo-ASN
    }
}

https://home.irked.me {
    import geoblock
    reverse_proxy http://192.168.1.12:8123 {
        header_up Host {host}
        header_up X-Real-IP {remote_host}
        header_up X-Forwarded-For {remote_host}
        header_up X-Forwarded-Proto {scheme}
    }
}

that geoblock call works for all my other self hosted services (jellyfin, qbit, nextcloud) but when i enable it for HA i get no information in my logs and a screen i havent seen before

homeassistant_failed
homeassistant_failed815×512 10.9 KB

and my (HA Core) logs say:

There are no new issues!

is there a header i am supposed to be forwarding to HA, i added all the ones i could find in an effort to solve this problem?