.env.template

2026-09-27 08:48:31 +00:00
parent fcc1b8acff
commit a6901c20fb
1 changed files with 27 additions and 0 deletions
@@ -0,0 +1,27 @@
+# oauth2-proxy Konfiguration
+OAUTH2_PROXY_PROVIDER=oidc
+OAUTH2_PROXY_OIDC_ISSUER_URL=https://iam.ljh31.de/realms/family
+OAUTH2_PROXY_CLIENT_ID=auth-proxy
+OAUTH2_PROXY_CLIENT_SECRET=<keycloak_client_secret>
+OAUTH2_PROXY_REDIRECT_URL=https://auth-proxy.ljh31.de/oauth2/callback
+
+# Cookie
+OAUTH2_PROXY_COOKIE_SECRET=<openssl rand -hex 16>
+OAUTH2_PROXY_COOKIE_NAME=_oauth2_proxy
+OAUTH2_PROXY_COOKIE_EXPIRE=2h
+OAUTH2_PROXY_COOKIE_SECURE=true
+OAUTH2_PROXY_COOKIE_SAMESITE=lax
+
+# User-Einschränkung (nur ljH31.de-Domains)
+OAUTH2_PROXY_EMAIL_DOMAINS=ljh31.de
+
+# Headers für die Backend-App
+OAUTH2_PROXY_SET_XAUTHREQUEST=true
+OAUTH2_PROXY_PASS_ACCESS_TOKEN=true
+
+# HTTP-Listen-Adresse (0.0.0.0 für Container-Zugriff)
+OAUTH2_PROXY_HTTP_ADDRESS=0.0.0.0:4180
+
+# Logging
+OAUTH2_PROXY_LOG_LEVEL=info
+OAUTH2_PROXY_LOG_FORMAT=json