diff options
| author | Vincent Ambo <mail@tazj.in> | 2022-01-04T11·28+0300 |
|---|---|---|
| committer | tazjin <tazjin@tvl.su> | 2022-01-04T18·04+0000 |
| commit | 73288ba569d0439f3ea0e8cea1b66f8b9411dbdc (patch) | |
| tree | cba5f18f1fe2626ef843dfcacb1574c8f9734e04 /ops/machines/whitby/default.nix | |
| parent | 3806cea40bb2099209de922731c1b7dbd9507e58 (diff) | |
feat(ops): Add initial oauth2_proxy configuration r/3518
The intent is to configure oauth2_proxy pointing at Keycloak to enable usage with nginx auth_request directives. I want to expose this as a function from within the module in which nginx server configuration blocks can be wrapped, but the function for that is currently a placeholder. Change-Id: I5ed7deb9bf1c62818f516e68c33e8c5b632fccfe Reviewed-on: https://cl.tvl.fyi/c/depot/+/4767 Tested-by: BuildkiteCI Reviewed-by: grfn <grfn@gws.fyi>
Diffstat (limited to 'ops/machines/whitby/default.nix')
| -rw-r--r-- | ops/machines/whitby/default.nix | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/ops/machines/whitby/default.nix b/ops/machines/whitby/default.nix index 28d7cf381d..f9a546f7ed 100644 --- a/ops/machines/whitby/default.nix +++ b/ops/machines/whitby/default.nix @@ -13,6 +13,7 @@ in { "${depot.path}/ops/modules/irccat.nix" "${depot.path}/ops/modules/monorepo-gerrit.nix" "${depot.path}/ops/modules/nixery.nix" + "${depot.path}/ops/modules/oauth2_proxy.nix" "${depot.path}/ops/modules/owothia.nix" "${depot.path}/ops/modules/panettone.nix" "${depot.path}/ops/modules/paroxysm.nix" @@ -211,6 +212,7 @@ in { irccat.file = secretFile "irccat"; keycloak-db.file = secretFile "keycloak-db"; nix-cache-priv.file = secretFile "nix-cache-priv"; + oauth2_proxy.file = secretFile "oauth2_proxy"; owothia.file = secretFile "owothia"; panettone.file = secretFile "panettone"; smtprelay.file = secretFile "smtprelay"; @@ -396,6 +398,9 @@ in { # Run autosubmit bot for Gerrit gerrit-queue.enable = true; + + # Run oauth2_proxy for internal service auth + oauth2_proxy.enable = true; }; services.postgresql = { |