ringofstorms/dotfiles
ringofstorms/dotfiles
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

not sure yet

Browse source
This commit is contained in:
RingOfStorms (Joshua Bell) 2025-10-03 18:04:43 -05:00
parent d9d1ba5076
commit 02363bb01e
3 changed files with 19 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

15
common/secrets/secrets/oauth2_proxy_cookie_secret.age Normal file
View file

@ -0,0 +1,15 @@
-----BEGIN AGE ENCRYPTED FILE-----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=
-----END AGE ENCRYPTED FILE-----

3
common/secrets/secrets/secrets.nix
View file

@ -129,6 +129,9 @@ in
"oauth2_proxy_zitadel_client_secret.age" = {
publicKeys = authorityKey ++ h001;
};
"oauth2_proxy_cookie_secret.age" = {
publicKeys = authorityKey ++ h001;
};
"openwebui_env.age" = {
publicKeys = authorityKey ++ h001;
};

2
hosts/h001/mods/oauth2-proxy.nix
View file

@ -11,7 +11,7 @@
oidcIssuerUrl = "https://sso.joshuabell.xyz:443";
keyFile = config.age.secrets.oauth2_proxy_zitadel_client_secret.path;
nginx.domain = "sso-proxy.joshuabell.xyz";
# email.domains = [ ];
email.domains = [ "*" ];
# extraConfig = {
# whitelist-domain = ".joshuabell.xyz";
# cookie-domain = ".joshuabell.xyz";