keycloak #1
@@ -23,8 +23,7 @@ in
|
|||||||
provider = "keycloak-oidc";
|
provider = "keycloak-oidc";
|
||||||
clientID = "oauth2-proxy";
|
clientID = "oauth2-proxy";
|
||||||
keyFile = config.sops.secrets.oauth2-proxy.path;
|
keyFile = config.sops.secrets.oauth2-proxy.path;
|
||||||
oidcIssuerUrl = "https://auth.lebubu.org/realms/homelab";
|
oidcIssuerUrl = "${config.my.servers.keycloak.url}/realms/homelab";
|
||||||
redirectURL = "https://auth-proxy.lebubu.org/oauth2/callback";
|
|
||||||
httpAddress = "${cfg.ip}:${toString cfg.port}";
|
httpAddress = "${cfg.ip}:${toString cfg.port}";
|
||||||
email.domains = [ "*" ];
|
email.domains = [ "*" ];
|
||||||
cookie = {
|
cookie = {
|
||||||
@@ -45,6 +44,8 @@ in
|
|||||||
session-store-type = "cookie";
|
session-store-type = "cookie";
|
||||||
skip-provider-button = true;
|
skip-provider-button = true;
|
||||||
code-challenge-method = "S256";
|
code-challenge-method = "S256";
|
||||||
|
redirect-url = "${cfg.url}/oauth2/callback";
|
||||||
|
whitelist-domain = [ ".lebubu.org" ];
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|||||||
Reference in New Issue
Block a user