mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-02-22 20:39:40 +01:00
19 lines
1011 B
Django/Jinja
19 lines
1011 B
Django/Jinja
http_address = "0.0.0.0:4180"
|
|
cookie_secret = "{{oauth2_proxy_cookie_secret}}"
|
|
email_domains = "{{primary_domain}}"
|
|
cookie_secure = "false"
|
|
upstreams = "http://{{oauth2_proxy_upstream_application_and_port}}"
|
|
cookie_domains = ["{{domain}}", "{{domains.keycloak}}"] # Required so cookie can be read on all subdomains.
|
|
whitelist_domains = [".{{primary_domain}}"] # Required to allow redirection back to original requested target.
|
|
|
|
# keycloak provider
|
|
client_secret = "{{oidc_client_secret}}"
|
|
client_id = "{{oidc_client_id}}"
|
|
redirect_url = "https://{{domain}}/oauth2/callback"
|
|
oidc_issuer_url = "{{oidc_client_issuer_url}}"
|
|
provider = "oidc"
|
|
provider_display_name = "Keycloak"
|
|
|
|
# role restrictions
|
|
#cookie_roles = "realm_access.roles"
|
|
allowed_roles = "{{oauth2_proxy_allowed_roles}}" |