@@ -17,7 +17,7 @@
1717 - [CVE-2025-61727](https://access.redhat.com/security/cve/cve-2025-61727)
1818 - [CVE-2025-47914](https://access.redhat.com/security/cve/cve-2025-47914)
1919 - [CVE-2025-58181](https://access.redhat.com/security/cve/cve-2025-58181)
20−- 🗂️ Alpha Config YAML parsing revamped using mapstructure with custom decoders
20+- 🗂️ AMajor Alpha Config YAML parsing revamped for better extensibility and preparing v8
2121- 🐛 Squashed some bugs
2222
2323## Important Notes
@@ -51,6 +51,38 @@ injectRequestHeaders:
5151 value: my-super-secret
5252```
5353
54+Furthermore, Alpha Config now fully supports configuring the `Server` struct using YAML.
55+
56+```yaml
57+// Server represents the configuration for the Proxy HTTP(S) configuration.
58+type Server struct {
59+ // BindAddress is the address on which to serve traffic.
60+ BindAddress string `yaml:"bindAddress,omitempty"`
61+
62+ // SecureBindAddress is the address on which to serve secure traffic.
63+ SecureBindAddress string `yaml:"secureBindAddress,omitempty"`
64+
65+ // TLS contains the information for loading the certificate and key for the
66+ // secure traffic and further configuration for the TLS server.
67+ TLS *TLS `yaml:"tls,omitempty"`
68+}
69+
70+// TLS contains the information for loading a TLS certificate and key
71+// as well as an optional minimal TLS version that is acceptable.
72+type TLS struct {
73+ // Key is the TLS key data to use.
74+ Key *SecretSource `yaml:"key,omitempty"`
75+ // Cert is the TLS certificate data to use.
76+ Cert *SecretSource `yaml:"cert,omitempty"`
77+ // MinVersion is the minimal TLS version that is acceptable.
78+ MinVersion string `yaml:"minVersion,omitempty"`
79+ // CipherSuites is a list of TLS cipher suites that are allowed.
80+ CipherSuites []string `yaml:"cipherSuites,omitempty"`
81+}
82+```
83+
84+More about how to use Alpha Config can be found in the [documentation](https://oauth2-proxy.github.io/oauth2-proxy/configuration/alpha-config#server).
85+
5486We are committed to Semantic Versioning and usually avoid breaking changes without a major version release.
5587Advancing Alpha Config toward its Beta stage required this exception, and even for the Alpha Config we try
5688to keep breaking changes in v7 to a minium. Thank you for understanding the need for this step to prepare