home/kubernetes-deployments
2
0
Fork 0
Code Issues 3 Pull requests Projects Releases Packages Wiki Activity Actions

Use OIDC auth for freshrss

Browse source
This commit is contained in:
Pim Kunis 2025-02-08 13:02:59 +01:00
parent 05f020ecb3
commit 7f1505878b
4 changed files with 76 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

19
modules/freshrss.nix
View file

@ -36,6 +36,14 @@
CRON_MIN.value = "2,32";
ADMIN_EMAIL.value = "pim@kunis.nl";
PUBLISHED_PORT.value = "443";
OIDC_ENABLED.value = "1";
OIDC_PROVIDER_METADATA_URL.value = "https://auth.kun.is/.well-known/openid-configuration";
OIDC_CLIENT_ID.value = "HDp48U5TaX-3gWKNEfHx5ea2C7gfaQm-OsSWREq4WTzln56IBGy.rT61lq9rF-LTZFlWOd44";
OIDC_CLIENT_SECRET.value = "ref+sops://secrets.yml#/authelia/oidc/freshrss_client_secret";
OIDC_CLIENT_CRYPTO_KEY.value = "ref+sops://secrets.yml#/freshrss/oidc_crypto_key";
OIDC_REMOTE_USER_CLAIM.value = "preferred_username";
OIDC_SCOPES.value = "openid groups email profile";
OIDC_X_FORWARDED_HEADERS.value = "X-Forwarded-Host X-Forwarded-Port X-Forwarded-Proto";
ADMIN_PASSWORD.valueFrom.secretKeyRef = {
name = "server";
@ -76,9 +84,20 @@
targetPort = "web";
};
};
ingresses.freshrss.metadata.annotations."traefik.ingress.kubernetes.io/router.middlewares" = "kube-system-forwardauth-authelia@kubernetescrd";
};
lab = {
ingresses.freshrss = {
host = "rss.kun.is";
service = {
name = "server";
portName = "web";
};
};
tailscaleIngresses.tailscale = {
host = "freshrss";
service.name = "server";