sokai/mynixos-config
1
1
Fork 0
forked from mirrors_public/oddlama_nix-config
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: use nginx json logs; oauth2-proxy authentication working, groups not yet

Browse source
This commit is contained in:
oddlama 2023-06-23 00:40:15 +02:00
parent 71dbda6262
commit 1a0378ee5c
No known key found for this signature in database
GPG key ID: 14EFE510775FE39A
4 changed files with 31 additions and 48 deletions
Download patch file Download diff file Expand all files Collapse all files

4
hosts/sentinel/oauth2.nix
View file

@ -7,7 +7,7 @@
extra.oauth2_proxy = {
enable = true;
cookieDomain = config.repo.secrets.local.personalDomain;
authProxyDomain = "sentinel.${config.repo.secrets.local.personalDomain}";
portalDomain = "oauth2.${config.repo.secrets.local.personalDomain}";
};
age.secrets.oauth2-proxy-secret = {
@ -18,7 +18,7 @@
services.oauth2_proxy = {
provider = "oidc";
scope = "openid";
scope = "openid email";
loginURL = "https://${config.proxiedDomains.kanidm}/ui/oauth2";
redeemURL = "https://${config.proxiedDomains.kanidm}/oauth2/token";
validateURL = "https://${config.proxiedDomains.kanidm}/oauth2/openid/web-sentinel/userinfo";