14 lines
662 B
Bash
14 lines
662 B
Bash
# Enterprise OIDC values. Keep the real file at /opt/casan-control-panel with chmod 0600.
|
|
OAUTH2_PROXY_PROVIDER=oidc
|
|
OAUTH2_PROXY_OIDC_ISSUER_URL=https://id.example.internal/realms/casan
|
|
OAUTH2_PROXY_CLIENT_ID=casan-control-panel
|
|
OAUTH2_PROXY_CLIENT_SECRET=replace-from-secret-manager
|
|
OAUTH2_PROXY_COOKIE_SECRET=replace-with-32-byte-base64-secret
|
|
OAUTH2_PROXY_COOKIE_SECURE=true
|
|
OAUTH2_PROXY_REDIRECT_URL=https://control.casan.company.internal/oauth2/callback
|
|
OAUTH2_PROXY_OIDC_GROUPS_CLAIM=groups
|
|
OAUTH2_PROXY_SET_XAUTHREQUEST=true
|
|
OAUTH2_PROXY_PASS_ACCESS_TOKEN=true
|
|
OAUTH2_PROXY_PASS_AUTHORIZATION_HEADER=true
|
|
OAUTH2_PROXY_SCOPE="openid profile email groups"
|