From ea75d168e423dfd71d6122d3c9540223585c662e Mon Sep 17 00:00:00 2001 From: Grigory Shipunov Date: Tue, 21 Jan 2025 00:14:24 +0000 Subject: deploy authentik, cleanup --- hosts/auth/oauth2-proxy.nix | 25 ------------------------- 1 file changed, 25 deletions(-) delete mode 100644 hosts/auth/oauth2-proxy.nix (limited to 'hosts/auth/oauth2-proxy.nix') diff --git a/hosts/auth/oauth2-proxy.nix b/hosts/auth/oauth2-proxy.nix deleted file mode 100644 index 81cdf8f..0000000 --- a/hosts/auth/oauth2-proxy.nix +++ /dev/null @@ -1,25 +0,0 @@ -{ config, ... }: -{ - sops.secrets."oauth2-proxy/env" = { - owner = config.users.users.oauth2-proxy.name; - }; - - services.oauth2-proxy = { - enable = true; - reverseProxy = true; - provider = "keycloak-oidc"; - httpAddress = "0.0.0.0:4180"; - oidcIssuerUrl = "https://auth.oxapentane.com/realms/0xalab-prod"; - clientID = "radicale-proxy"; - redirectURL = "https://dav.oxapentane.com/oauth2/callback"; - keyFile = config.sops.secrets."oauth2-proxy/env".path; - scope = "openid"; - email.domains = [ "*" ]; - setXauthrequest = true; - cookie = { - secure = true; - refresh = "48h0m0s"; - domain = ".oxapentane.com"; - }; - }; -} -- cgit v1.3.1