How to push to Gitea behind a authenticating reverse proxy?

My Gitea installation is behind Authelia (which provides a layer of MFA authentication in front of all my services and soon OpenID authentication). It works great.

What does not work that great is pushing - my git client hits Authelia and cannot go further.

I would like to inquire if there is a well-known solution to that problem (outside of using SSH)?