tvl-depot/ops/secrets/oauth2_proxy.age

age-encryption.org/v1
-> ssh-ed25519 dcsaLw 3vCzURGgzn7i3pZp39oSfYy1F331qBDewFgjocK4/nE
doccb4CZhyrA7jvbuG3i8nowApVGKWfIejJjLeXnb9Q
-> ssh-ed25519 CpJBgQ 4KovCGvA0cBvEkhfyantUCny49hTu4L038xj/ZG2lCg
o9iaan7jKGYukS4IiTVLV5YqjiycaWyPXyo3x6k8Jhk
-> ssh-ed25519 aXKGcg stGJqj37f0E6S0qJW/r/cYXIoT+l4ERG0c/CMckpS28
aNP2LcrFe9wLB1dnbJjoUTa8ckpMbR3cJtltDn/8st8
-> ssh-ed25519 OkGqLg UK89eEeI/SOWUaR4jg4rDuKFOkzsf6PgNkcphUCoyj8
o3WFOhB0B2T1F8mxb5qw25S4r9bYyc4tqwLb/iK0TAY
-> ZcBt-grease P*F$|]1G *a9 ^dTv-Whe K`GVU
mwq98CjcnoinoAsGUM2PolGrXBZhs9jbUQB8qEAZ7Qtzd6z6BjGoPGr4bjokZQ08
RwOx9jBmAAFaW9Ak5JX9RBvxu/IIz6xVmQ8a8ev95tA
--- ShfGC5iYYwDC5fXRkZV9Oh1aHJONbdR1EaAp+lrKWUE
<EFBFBD><EFBFBD><EFBFBD>t<EFBFBD>~E<>V<EFBFBD><01>/֖<>E}<7D>_<EFBFBD>H<EFBFBD><48>R<EFBFBD>7<EFBFBD>PsSw>½<><C2BD><EFBFBD>Zo<5A>D`n)<29>ݷK,T}
<0A>'F<>[<5B>S<EFBFBD>Ky<>7m"<22>E<>G3<47>"<22><><13><>lj倕<05><>^b[<5B><>M<EFBFBD>lf<06>p<EFBFBD><70>X<11>C<EFBFBD><43><EFBFBD><EFBFBD><EFBFBD>]<5D>!N]m<><6D><EFBFBD><EFBFBD>
g<><67><EFBFBD>0<EFBFBD><30><EFBFBD><EFBFBD><EFBFBD>!<02>g<EFBFBD><67><EFBFBD>1<EFBFBD><31><15><>Y<1D><>X<EFBFBD>
-												feat(ops): Add initial oauth2_proxy configuration

The intent is to configure oauth2_proxy pointing at Keycloak to enable
usage with nginx auth_request directives.

I want to expose this as a function from within the module in which
nginx server configuration blocks can be wrapped, but the function for
that is currently a placeholder.

Change-Id: I5ed7deb9bf1c62818f516e68c33e8c5b632fccfe
Reviewed-on: https://cl.tvl.fyi/c/depot/+/4767
Tested-by: BuildkiteCI
Reviewed-by: grfn <grfn@gws.fyi>

											
										
										
											2022-01-04 12:28:58 +01:00
+								age-encryption.org/v1
-												fix(ops/oauth2_proxy): Fix cookie secret length

The cookie secret in the encrypted file was too long, because the
generation command in the oauth2_proxy docs is also wrong. Should
probably fix that upstream as well.

Also noticed that an extra '2' snuck into the service name and fixed
that.

Change-Id: I9a344a75993ab1f98299a8d45e7f5b2e146b7fc5
Reviewed-on: https://cl.tvl.fyi/c/depot/+/4957
Autosubmit: tazjin <tazjin@tvl.su>
Tested-by: BuildkiteCI
Reviewed-by: sterni <sternenseemann@systemli.org>

											
										
										
											2022-01-17 12:43:06 +01:00
+								-> ssh-ed25519 dcsaLw 3vCzURGgzn7i3pZp39oSfYy1F331qBDewFgjocK4/nE
 								doccb4CZhyrA7jvbuG3i8nowApVGKWfIejJjLeXnb9Q
 								-> ssh-ed25519 CpJBgQ 4KovCGvA0cBvEkhfyantUCny49hTu4L038xj/ZG2lCg
 								o9iaan7jKGYukS4IiTVLV5YqjiycaWyPXyo3x6k8Jhk
 								-> ssh-ed25519 aXKGcg stGJqj37f0E6S0qJW/r/cYXIoT+l4ERG0c/CMckpS28
 								aNP2LcrFe9wLB1dnbJjoUTa8ckpMbR3cJtltDn/8st8
 								-> ssh-ed25519 OkGqLg UK89eEeI/SOWUaR4jg4rDuKFOkzsf6PgNkcphUCoyj8
 								o3WFOhB0B2T1F8mxb5qw25S4r9bYyc4tqwLb/iK0TAY
 								-> ZcBt-grease P*F$|]1G *a9 ^dTv-Whe K`GVU
 								mwq98CjcnoinoAsGUM2PolGrXBZhs9jbUQB8qEAZ7Qtzd6z6BjGoPGr4bjokZQ08
 								RwOx9jBmAAFaW9Ak5JX9RBvxu/IIz6xVmQ8a8ev95tA
 								--- ShfGC5iYYwDC5fXRkZV9Oh1aHJONbdR1EaAp+lrKWUE
 								<EFBFBD><EFBFBD><EFBFBD>t<EFBFBD>~E<>V<EFBFBD><01>/֖<>E}<7D>_<EFBFBD>H<EFBFBD><48>R<EFBFBD>7<EFBFBD>PsSw>½<><C2BD><EFBFBD>Zo<5A>D`n)<29>ݷK,T}
<0A>'F<>[<5B>S<EFBFBD>Ky<>7m"<22>E<>G3<47>"<22><><13><>lj倕<05><>^b[<5B><>M<EFBFBD>lf<06>p<EFBFBD><70>X<11>C<EFBFBD><43><EFBFBD><EFBFBD><EFBFBD>]<5D>!N]m<><6D><EFBFBD><EFBFBD>
g<><67><EFBFBD>0<EFBFBD><30><EFBFBD><EFBFBD><EFBFBD>!<02>g<EFBFBD><67><EFBFBD>1<EFBFBD><31><15><>Y<1D><>X<EFBFBD>