From 11c4b77eabc2285e5f6038e7883f078e0479ab7b Mon Sep 17 00:00:00 2001
From: Luke Granger-Brown <hg@lukegb.com>
Date: Tue, 29 Dec 2020 20:00:52 +0000
Subject: [PATCH] etheroute-lon01: send more identity headers

---
 ops/nixos/etheroute-lon01/default.nix | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/ops/nixos/etheroute-lon01/default.nix b/ops/nixos/etheroute-lon01/default.nix
index aed860d8ee..8127c54bd6 100644
--- a/ops/nixos/etheroute-lon01/default.nix
+++ b/ops/nixos/etheroute-lon01/default.nix
@@ -186,6 +186,11 @@ in {
         login_hint = "lukegb@lukegb.com";
       };
 
+      jwt_claims_headers = [
+        "email"
+        "user"
+      ];
+
       databroker_storage_type = "redis";
       databroker_storage_connection_string = "redis://127.0.0.1:6379/15";
 
@@ -195,12 +200,12 @@ in {
       policy = let
         baseConfig = {
           allowed_domains = [ "lukegb.com" ];
+          pass_identity_headers = true;
         };
         serviceOnHost = server: hostName: baseConfig // {
           from = "https://${hostName}";
           to = "http://${server}";
           preserve_host_header = true;
-          pass_identity_headers = true;
         };
         hostToServices = {
           clouvider-fra01 = [