service: Support proxy forward auth using OAuth2 Proxy

2025-07-13 19:09:08 +03:00
parent 543a34f60d
commit 6baab11851
5 changed files with 33 additions and 5 deletions
--- a/roles/service/tasks/proxy.yaml
+++ b/roles/service/tasks/proxy.yaml
@@ -9,4 +9,7 @@
    vhost_proxy_target_netproto: unix
    vhost_proxy_target_socket: "/run/{{ service_name }}-socat.sock"
    vhost_proxy_headers: "{{ _service_proxy_headers }}"
-    vhost_locations: "{{ service_vhost_locations }}"
+    vhost_proxy_auth_socket: "{{ _service_oauth2_socket }}"
+    vhost_proxy_auth_uri: /oauth2/auth
+    vhost_proxy_auth_unauthorized_redir: "/oauth2/sign_in?rd={scheme}://{host}{uri}"
+    vhost_locations: "{{ _service_vhost_locations }}"