depot/ops/nixos/etheroute-lon01/pomerium.yaml

36 lines
976 B
YAML

address: ":443"
http_redirect_addr: ":80"
idp_provider: google
idp_client_id: 136257844546-qsa6hi1oqqoq2bnt93deo4e70ggbn1p8.apps.googleusercontent.com
forward_auth_url: https://fwdauth.int.lukegb.com
authenticate_service_url: https://auth.int.lukegb.com
policy:
- from: https://httpbin.int.lukegb.com
to: https://verify.pomerium.com
allowed_domains:
- lukegb.com
pass_identity_headers: true
- from: https://int.lukegb.com
to: http://clouvider-fra01
allowed_domains:
- lukegb.com
preserve_host_header: true
- from: https://sonarr.int.lukegb.com
to: http://clouvider-fra01
allowed_domains:
- lukegb.com
preserve_host_header: true
- from: https://radarr.int.lukegb.com
to: http://clouvider-fra01
allowed_domains:
- lukegb.com
preserve_host_header: true
- from: https://deluge.int.lukegb.com
to: http://clouvider-fra01
allowed_domains:
- lukegb.com
preserve_host_header: true