Update oauth2-proxy configuration to use dynamic Keycloak URL and enhance redirect settings
This commit is contained in:
@@ -23,8 +23,7 @@ in
|
||||
provider = "keycloak-oidc";
|
||||
clientID = "oauth2-proxy";
|
||||
keyFile = config.sops.secrets.oauth2-proxy.path;
|
||||
oidcIssuerUrl = "https://auth.lebubu.org/realms/homelab";
|
||||
redirectURL = "https://auth-proxy.lebubu.org/oauth2/callback";
|
||||
oidcIssuerUrl = "${config.my.servers.keycloak.url}/realms/homelab";
|
||||
httpAddress = "${cfg.ip}:${toString cfg.port}";
|
||||
email.domains = [ "*" ];
|
||||
cookie = {
|
||||
@@ -45,6 +44,8 @@ in
|
||||
session-store-type = "cookie";
|
||||
skip-provider-button = true;
|
||||
code-challenge-method = "S256";
|
||||
redirect-url = "${cfg.url}/oauth2/callback";
|
||||
whitelist-domain = [ ".lebubu.org" ];
|
||||
};
|
||||
};
|
||||
};
|
||||
|
||||
Reference in New Issue
Block a user