it works!?

hosts/h001/mods/oauth2-proxy.nix

@@ -15,9 +15,18 @@
     extraConfig = {
       whitelist-domain = "*.joshuabell.xyz";
       cookie-domain = ".joshuabell.xyz";
+      oidc-groups-claim = "flatRolesClaim";
+      # scope = "openid email profiles";
+
+      # pass-access-token = "true";
+      # set-authorization-header = "true";
+      # pass-user-headers = "true";
+
+      # show-debug-on-error = "true";
+      # errors-to-info-log = "true";
     };
     cookie.refresh = "30m";
-    setXauthrequest = true;
+    # setXauthrequest = true;
   };
 
   services.nginx.virtualHosts."sso-proxy.joshuabell.xyz" = {

hosts/h001/mods/trilium.nix

@@ -28,24 +28,5 @@
         };
       };
     };
-
-    # services.nginx = {
-    #   virtualHosts = {
-    #     "trilium" = {
-    #       serverName = "h001.net.joshuabell.xyz";
-    #       listen = [
-    #         {
-    #           port = 9111;
-    #           addr = "0.0.0.0";
-    #         }
-    #       ];
-    #       locations."/" = {
-    #         proxyWebsockets = true;
-    #         recommendedProxySettings = true;
-    #         proxyPass = "http://127.0.0.1:9111";
-    #       };
-    #     };
-    #   };
-    # };
   };
 }