git.iko.soy/typeable/oauth2-proxy
on v2.1 help sign in
typeable/oauth2-proxy/contrib/oauth2_proxy.cfg.example
75 lines 2.7 kB history raw
1## OAuth2 Proxy Config File
2## https://github.com/bitly/oauth2_proxy
4## <addr>:<port> to listen on for HTTP/HTTPS clients
5# http_address = "127.0.0.1:4180"
6# https_address = ":443"
8## TLS Settings
9# tls_cert_file = ""
10# tls_key_file = ""
12## the OAuth Redirect URL.
13# defaults to the "https://" + requested host header + "/oauth2/callback"
14# redirect_url = "https://internalapp.yourcompany.com/oauth2/callback"
16## the http url(s) of the upstream endpoint. If multiple, routing is based on path
17# upstreams = [
18# "http://127.0.0.1:8080/"
19# ]
21## Log requests to stdout
22# request_logging = true
24## pass HTTP Basic Auth, X-Forwarded-User and X-Forwarded-Email information to upstream
25# pass_basic_auth = true
26## pass the request Host Header to upstream
27## when disabled the upstream Host is used as the Host Header
28# pass_host_header = true
30## Email Domains to allow authentication for (this authorizes any email on this domain)
31## for more granular authorization use `authenticated_emails_file`
32## To authorize any email addresses use "*"
33# email_domains = [
34# "yourcompany.com"
35# ]
37## The OAuth Client ID, Secret
38# client_id = "123456.apps.googleusercontent.com"
39# client_secret = ""
41## Pass OAuth Access token to upstream via "X-Forwarded-Access-Token"
42# pass_access_token = false
44## Authenticated Email Addresses File (one email per line)
45# authenticated_emails_file = ""
47## Htpasswd File (optional)
48## Additionally authenticate against a htpasswd file. Entries must be created with "htpasswd -s" for SHA encryption
49## enabling exposes a username/login signin form
50# htpasswd_file = ""
52## Templates
53## optional directory with custom sign_in.html and error.html
54# custom_templates_dir = ""
56## Cookie Settings
57## Name - the cookie name
58## Secret - the seed string for secure cookies; should be 16, 24, or 32 bytes
59## for use with an AES cipher when cookie_refresh or pass_access_token
60## is set
61## Domain - (optional) cookie domain to force cookies to (ie: .yourcompany.com)
62## Expire - (duration) expire timeframe for cookie
63## Refresh - (duration) refresh the cookie when duration has elapsed after cookie was initially set.
64## Should be less than cookie_expire; set to 0 to disable.
65## On refresh, OAuth token is re-validated.
66## (ie: 1h means tokens are refreshed on request 1hr+ after it was set)
67## Secure - secure cookies are only sent by the browser of a HTTPS connection (recommended)
68## HttpOnly - httponly cookies are not readable by javascript (recommended)
69# cookie_name = "_oauth2_proxy"
70# cookie_secret = ""
71# cookie_domain = ""
72# cookie_expire = "168h"
73# cookie_refresh = ""
74# cookie_secure = true
75# cookie_httponly = true