diff options
| author | Grigory Shipunov | 2025-01-21 00:14:24 +0000 |
|---|---|---|
| committer | Grigory Shipunov | 2025-01-21 00:14:24 +0000 |
| commit | ea75d168e423dfd71d6122d3c9540223585c662e (patch) | |
| tree | 03b56ab92278bd1aab17f285b92541f3cebe46a7 /hosts/auth/oauth2-proxy.nix | |
| parent | 30d2e7fafc7ea9e89ae26cedeab0fcbdf457bc3d (diff) | |
deploy authentik, cleanup
Diffstat (limited to 'hosts/auth/oauth2-proxy.nix')
| -rw-r--r-- | hosts/auth/oauth2-proxy.nix | 25 |
1 files changed, 0 insertions, 25 deletions
diff --git a/hosts/auth/oauth2-proxy.nix b/hosts/auth/oauth2-proxy.nix deleted file mode 100644 index 81cdf8f..0000000 --- a/hosts/auth/oauth2-proxy.nix +++ /dev/null @@ -1,25 +0,0 @@ -{ config, ... }: -{ - sops.secrets."oauth2-proxy/env" = { - owner = config.users.users.oauth2-proxy.name; - }; - - services.oauth2-proxy = { - enable = true; - reverseProxy = true; - provider = "keycloak-oidc"; - httpAddress = "0.0.0.0:4180"; - oidcIssuerUrl = "https://auth.oxapentane.com/realms/0xalab-prod"; - clientID = "radicale-proxy"; - redirectURL = "https://dav.oxapentane.com/oauth2/callback"; - keyFile = config.sops.secrets."oauth2-proxy/env".path; - scope = "openid"; - email.domains = [ "*" ]; - setXauthrequest = true; - cookie = { - secure = true; - refresh = "48h0m0s"; - domain = ".oxapentane.com"; - }; - }; -} |
