peter/haccfiles
1
0
Fork 0
forked from hacc/haccfiles
Code Issues Pull requests Projects Releases Wiki Activity

wink: add cookie domain in oauth2-proxy

Browse source 
In theory, this should work without that option (by getting the correct domain
from the nginx reverse proxy via IP header), but apparently it doesn't.

Also, I moved wink to wink2.hacc.space
This commit is contained in:
stuebinm 2021-03-22 23:46:24 +01:00
parent f1bd105afa
commit e6edb7b8d8
No known key found for this signature in database
GPG key ID: 8FBE8AAD32FA12B7
1 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
services/wink.nix
View file

@ -44,6 +44,7 @@
httpAddress = "http//0.0.0.0:8000"; httpAddress = "http//0.0.0.0:8000";
email.domains = [ "*" ]; email.domains = [ "*" ];
cookie.domain = "wink2.hacc.space";
# for the keycloak side of the configuration, see the documentation at # for the keycloak side of the configuration, see the documentation at
# https://oauth2-proxy.github.io/oauth2-proxy/docs/configuration/oauth_provider#keycloak-auth-provider # https://oauth2-proxy.github.io/oauth2-proxy/docs/configuration/oauth_provider#keycloak-auth-provider
@ -76,7 +77,7 @@
}; };
services.nginx.virtualHosts."matrix.hacc.space" = { services.nginx.virtualHosts."wink2.hacc.space" = {
locations."/".proxyPass = "http://${config.containers.wink.localAddress}:8000"; locations."/".proxyPass = "http://${config.containers.wink.localAddress}:8000";
forceSSL = true; forceSSL = true;
enableACME = true; enableACME = true;