about summary refs log tree commit diff
path: root/ops/secrets
diff options
context:
space:
mode:
authorVincent Ambo <mail@tazj.in>2022-01-04T11·28+0300
committertazjin <tazjin@tvl.su>2022-01-04T18·04+0000
commit73288ba569d0439f3ea0e8cea1b66f8b9411dbdc (patch)
treecba5f18f1fe2626ef843dfcacb1574c8f9734e04 /ops/secrets
parent3806cea40bb2099209de922731c1b7dbd9507e58 (diff)
feat(ops): Add initial oauth2_proxy configuration r/3518
The intent is to configure oauth2_proxy pointing at Keycloak to enable
usage with nginx auth_request directives.

I want to expose this as a function from within the module in which
nginx server configuration blocks can be wrapped, but the function for
that is currently a placeholder.

Change-Id: I5ed7deb9bf1c62818f516e68c33e8c5b632fccfe
Reviewed-on: https://cl.tvl.fyi/c/depot/+/4767
Tested-by: BuildkiteCI
Reviewed-by: grfn <grfn@gws.fyi>
Diffstat (limited to 'ops/secrets')
-rw-r--r--ops/secrets/oauth2_proxy.agebin0 -> 742 bytes
-rw-r--r--ops/secrets/secrets.nix1
2 files changed, 1 insertions, 0 deletions
diff --git a/ops/secrets/oauth2_proxy.age b/ops/secrets/oauth2_proxy.age
new file mode 100644
index 0000000000..2d1ab486e7
--- /dev/null
+++ b/ops/secrets/oauth2_proxy.age
Binary files differdiff --git a/ops/secrets/secrets.nix b/ops/secrets/secrets.nix
index 921e36e6c6..53f0d39318 100644
--- a/ops/secrets/secrets.nix
+++ b/ops/secrets/secrets.nix
@@ -28,6 +28,7 @@ in {
   "keycloak-db.age" = default;
   "nix-cache-priv.age" = default;
   "nix-cache-pub.age" = default;
+  "oauth2_proxy.age" = default;
   "owothia.age" = default;
   "panettone.age" = default;
   "smtprelay.age" = default;