commit b82347b61abb4972e837ee4013c774610e6cf2d0 · pyrox.dev/nixpkgs

+4 -5
nixos/modules/services/security/oauth2-proxy-nginx.nix
···

       97
       97
        
               virtualHosts.${vhost} = {

     

       98
       98
        
                 locations = {

     

       99
       99
        
                   "/".extraConfig = ''

     

       100
       100
       +
                     auth_request_set $user   $upstream_http_x_auth_request_user;

     

       101
       101
       +
                     auth_request_set $email  $upstream_http_x_auth_request_email;

     

       102
       102
       +
                     auth_request_set $auth_cookie $upstream_http_set_cookie;

     

       103
       103
       +
       

     

       100
       104
        
                     # pass information via X-User and X-Email headers to backend, requires running with --set-xauthrequest flag

     

       101
       105
        
                     proxy_set_header X-User  $user;

     

       102
       106
        
                     proxy_set_header X-Email $email;

     
···

       141
       145
        
                 extraConfig = ''

     

       142
       146
        
                   auth_request /oauth2/auth;

     

       143
       147
        
                   error_page 401 = @redirectToAuth2ProxyLogin;

     

       144
       144
       -
       

     

       145
       145
       -
                   # set variables being used in locations."/".extraConfig

     

       146
       146
       -
                   auth_request_set $user   $upstream_http_x_auth_request_user;

     

       147
       147
       -
                   auth_request_set $email  $upstream_http_x_auth_request_email;

     

       148
       148
       -
                   auth_request_set $auth_cookie $upstream_http_set_cookie;

     

       149
       148
        
                 '';

     

       150
       149
        
               };

     

       151
       150
        
             }) cfg.virtualHosts)