summaryrefslogtreecommitdiff
path: root/hosts/auth/oauth2-proxy.nix
diff options
context:
space:
mode:
authorGrigory Shipunov2025-01-21 00:14:24 +0000
committerGrigory Shipunov2025-01-21 00:14:24 +0000
commitea75d168e423dfd71d6122d3c9540223585c662e (patch)
tree03b56ab92278bd1aab17f285b92541f3cebe46a7 /hosts/auth/oauth2-proxy.nix
parent30d2e7fafc7ea9e89ae26cedeab0fcbdf457bc3d (diff)
deploy authentik, cleanup
Diffstat (limited to 'hosts/auth/oauth2-proxy.nix')
-rw-r--r--hosts/auth/oauth2-proxy.nix25
1 files changed, 0 insertions, 25 deletions
diff --git a/hosts/auth/oauth2-proxy.nix b/hosts/auth/oauth2-proxy.nix
deleted file mode 100644
index 81cdf8f..0000000
--- a/hosts/auth/oauth2-proxy.nix
+++ /dev/null
@@ -1,25 +0,0 @@
-{ config, ... }:
-{
- sops.secrets."oauth2-proxy/env" = {
- owner = config.users.users.oauth2-proxy.name;
- };
-
- services.oauth2-proxy = {
- enable = true;
- reverseProxy = true;
- provider = "keycloak-oidc";
- httpAddress = "0.0.0.0:4180";
- oidcIssuerUrl = "https://auth.oxapentane.com/realms/0xalab-prod";
- clientID = "radicale-proxy";
- redirectURL = "https://dav.oxapentane.com/oauth2/callback";
- keyFile = config.sops.secrets."oauth2-proxy/env".path;
- scope = "openid";
- email.domains = [ "*" ];
- setXauthrequest = true;
- cookie = {
- secure = true;
- refresh = "48h0m0s";
- domain = ".oxapentane.com";
- };
- };
-}