1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23

{ config, ... }:
{
  age.secrets.oa2p.file = ../secrets/oa2p.age;
  services = {
    oauth2-proxy = {
      enable = true;
      provider = "oidc";
      httpAddress = "localhost:6227";
      reverseProxy = true;
      cookie = {
        secure = true;
        domain = "wiki.jolheiser.com";
      };
      email.domains = [ "*" ];
      keyFile = config.age.secrets.oa2p.path;
      redirectURL = "https://wiki.jolheiser.com/oauth2/callback";
      oidcIssuerUrl = "https://id.jolheiser.com";
    };
    caddy.virtualHosts."oa2p.jolheiser.com".extraConfig = ''
      reverse_proxy localhost:6227
    '';
  };
}