home/kubernetes-deployments
2
0
Fork 0
Code Issues 4 Pull requests Projects Releases Packages Wiki Activity Actions

Enable OIDC for FreshRSS on Tailscale

Browse source
This commit is contained in:
Pim Kunis 2025-02-08 22:09:40 +01:00
parent 74c29e3fd0
commit c69d909b2f
2 changed files with 1 additions and 12 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
modules/authelia.nix
View file

@ -88,7 +88,7 @@
client_secret.path = "/secrets/authelia/freshrss_client_secret";
public = false;
authorization_policy = "two_factor";
redirect_uris = ["https://rss.kun.is:443/i/oidc/"];
redirect_uris = ["https://freshrss.griffin-mermaid.ts.net/i/oidc/"];
scopes = ["openid" "groups" "email" "profile"];
userinfo_signed_response_alg = "none";
token_endpoint_auth_method = "client_secret_basic";

11
modules/freshrss.nix
View file

@ -84,20 +84,9 @@
targetPort = "web";
};
};
ingresses.freshrss.metadata.annotations."traefik.ingress.kubernetes.io/router.middlewares" = "kube-system-forwardauth-authelia@kubernetescrd";
};
lab = {
ingresses.freshrss = {
host = "rss.kun.is";
service = {
name = "server";
portName = "web";
};
};
tailscaleIngresses.tailscale = {
host = "freshrss";
service.name = "server";