feat(koi): oidc auth for hass
This commit is contained in:
parent
b893d6e21e
commit
0266770c55
2 changed files with 9 additions and 1 deletions
|
@ -22,12 +22,20 @@ in
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
|
desu.secrets.hass-proxy-env = {};
|
||||||
|
desu.openid-proxy.services.hass = {
|
||||||
|
clientId = "hass";
|
||||||
|
domain = "hass.stupid.fish";
|
||||||
|
upstream = "http://10.42.0.3:8123";
|
||||||
|
envSecret = "hass-proxy-env";
|
||||||
|
};
|
||||||
|
|
||||||
services.nginx.virtualHosts."hass.stupid.fish" = {
|
services.nginx.virtualHosts."hass.stupid.fish" = {
|
||||||
forceSSL = true;
|
forceSSL = true;
|
||||||
useACMEHost = "stupid.fish";
|
useACMEHost = "stupid.fish";
|
||||||
|
|
||||||
locations."/" = {
|
locations."/" = {
|
||||||
proxyPass = "http://10.42.0.3:8123$request_uri";
|
proxyPass = "http://hass-oidc.docker$request_uri";
|
||||||
proxyWebsockets = true;
|
proxyWebsockets = true;
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
BIN
secrets/hass-proxy-env.age
Normal file
BIN
secrets/hass-proxy-env.age
Normal file
Binary file not shown.
Loading…
Reference in a new issue