lukegb/depot
1
0
Fork 0
Code Issues 1 Pull requests Projects Packages Activity Actions

etheroute-lon01: send more identity headers

Browse source
This commit is contained in:
Luke Granger-Brown 2020-12-29 20:00:52 +00:00
parent 6317f7ffba
commit 11c4b77eab
1 changed files with 6 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
ops/nixos/etheroute-lon01/default.nix
View file

@ -186,6 +186,11 @@ in {
login_hint = "lukegb@lukegb.com"; login_hint = "lukegb@lukegb.com";
}; };
jwt_claims_headers = [
"email"
"user"
];
databroker_storage_type = "redis"; databroker_storage_type = "redis";
databroker_storage_connection_string = "redis://127.0.0.1:6379/15"; databroker_storage_connection_string = "redis://127.0.0.1:6379/15";
@ -195,12 +200,12 @@ in {
policy = let policy = let
baseConfig = { baseConfig = {
allowed_domains = [ "lukegb.com" ]; allowed_domains = [ "lukegb.com" ];
pass_identity_headers = true;
}; };
serviceOnHost = server: hostName: baseConfig // { serviceOnHost = server: hostName: baseConfig // {
from = "https://${hostName}"; from = "https://${hostName}";
to = "http://${server}"; to = "http://${server}";
preserve_host_header = true; preserve_host_header = true;
pass_identity_headers = true;
}; };
hostToServices = { hostToServices = {
clouvider-fra01 = [ clouvider-fra01 = [