1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18

{ config, ... }:
{
  age.secrets.oa2p.file = ../secrets/oa2p.age;
  services.oauth2-proxy = {
    enable = true;
    provider = "oidc";
    httpAddress = "localhost:6227";
    reverseProxy = true;
    cookie = {
      secure = true;
      domain = "wiki.jolheiser.com";
    };
    email.domains = [ "*" ];
    keyFile = config.age.secrets.oa2p.path;
    redirectURL = "https://wiki.jolheiser.com/oauth2/callback";
    oidcIssuerUrl = "https://id.jolheiser.com";
  };
}