summaryrefslogtreecommitdiff
path: root/playbooks/roles/traefik/templates/volumes/oauth2proxy/oauth_proxy.cfg
diff options
context:
space:
mode:
authorElizabeth Hunt <me@liz.coffee>2025-08-11 18:39:55 -0700
committerElizabeth Hunt <me@liz.coffee>2025-08-11 18:39:55 -0700
commit08e92ca3b8ee6c38c3e19126378e51b46cf63b16 (patch)
tree6e9c0e0f394d645cea4208bcfab7e1d98d329e0e /playbooks/roles/traefik/templates/volumes/oauth2proxy/oauth_proxy.cfg
parent4f90a2fc5fd134b27c2f0e32a5f1192003d3f0cf (diff)
downloadinfra-08e92ca3b8ee6c38c3e19126378e51b46cf63b16.tar.gz
infra-08e92ca3b8ee6c38c3e19126378e51b46cf63b16.zip
Oauth proxy and monitoring init
Diffstat (limited to 'playbooks/roles/traefik/templates/volumes/oauth2proxy/oauth_proxy.cfg')
-rw-r--r--playbooks/roles/traefik/templates/volumes/oauth2proxy/oauth_proxy.cfg26
1 files changed, 26 insertions, 0 deletions
diff --git a/playbooks/roles/traefik/templates/volumes/oauth2proxy/oauth_proxy.cfg b/playbooks/roles/traefik/templates/volumes/oauth2proxy/oauth_proxy.cfg
new file mode 100644
index 0000000..3c412de
--- /dev/null
+++ b/playbooks/roles/traefik/templates/volumes/oauth2proxy/oauth_proxy.cfg
@@ -0,0 +1,26 @@
+## OAuth2 Proxy Config File
+
+request_logging = true
+email_domains = "*"
+reverse_proxy = true
+redirect_url = "https://{{ oauth_proxy_domain }}/oauth2/callback"
+real_client_ip_header = "X-Forwarded-For"
+trusted_ips = "{{ homelab_network }}"
+
+## Cookie Settings
+cookie_name = "_oauth2_proxy"
+cookie_secret = "{{ oauth_proxy_cookie_secret }}"
+cookie_domains = [".{{ domain }}", "{{ domain }}"]
+whitelist_domains = [".{{ domain }}", "{{ domain }}"]
+cookie_expire = "24h"
+cookie_refresh = "1h"
+cookie_secure = true
+session_store_type = "redis"
+redis_connection_url = "redis://oauth2-cache"
+
+## Templating
+
+banner = "-"
+footer = "-"
+custom_sign_in_logo="-"
+custom_templates_dir="/conf/templates"