commit 13a041b1746da698ea4e1ad5994c42a817403170 · pyrox.dev/nixpkgs

+25
nixos/modules/services/networking/headscale.nix
···

       406
       406
        
                       '';

     

       407
       407
        
                       example = [ "alice@example.com" ];

     

       408
       408
        
                     };

     

       409
       409
       +
       

     

       410
       410
       +
                     pkce = {

     

       411
       411
       +
                       enabled = lib.mkOption {

     

       412
       412
       +
                         type = lib.types.bool;

     

       413
       413
       +
                         default = false;

     

       414
       414
       +
                         description = ''

     

       415
       415
       +
                           Enable or disable PKCE (Proof Key for Code Exchange) support.

     

       416
       416
       +
                           PKCE adds an additional layer of security to the OAuth 2.0

     

       417
       417
       +
                           authorization code flow by preventing authorization code

     

       418
       418
       +
                           interception attacks

     

       419
       419
       +
                           See https://datatracker.ietf.org/doc/html/rfc7636

     

       420
       420
       +
                         '';

     

       421
       421
       +
                         example = true;

     

       422
       422
       +
                       };

     

       423
       423
       +
       

     

       424
       424
       +
                       method = lib.mkOption {

     

       425
       425
       +
                         type = lib.types.str;

     

       426
       426
       +
                         default = "S256";

     

       427
       427
       +
                         description = ''

     

       428
       428
       +
                           PKCE method to use:

     

       429
       429
       +
                             - plain: Use plain code verifier

     

       430
       430
       +
                             - S256: Use SHA256 hashed code verifier (default, recommended)

     

       431
       431
       +
                         '';

     

       432
       432
       +
                       };

     

       433
       433
       +
                     };

     

       409
       434
        
                   };

     

       410
       435
        
       

     

       411
       436
        
                   tls_letsencrypt_hostname = lib.mkOption {