-
Notifications
You must be signed in to change notification settings - Fork 9
/
.env-dist
68 lines (56 loc) · 3.23 KB
/
.env-dist
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
TRAEFIK_FORWARD_AUTH_REPO=https://github.com/thomseddon/traefik-forward-auth
TRAEFIK_FORWARD_AUTH_VERSION=v2.3.0
## Oauth secret: CHANGE THIS:
## use `openssl rand -base64 45`
TRAEFIK_FORWARD_AUTH_SECRET=
TRAEFIK_FORWARD_AUTH_LOG_LEVEL=debug
## Set central auth specific domain that will handle auth for all other domains:
TRAEFIK_FORWARD_AUTH_HOST=auth.example.com
TRAEFIK_FORWARD_AUTH_HTTPS_PORT=443
## Set your forgejo domain (only used for helping construct the other URLs)
TRAEFIK_FORWARD_AUTH_FORGEJO_DOMAIN=git.example.com
## Set cookie domain as the root domain for all subdomains:
TRAEFIK_FORWARD_AUTH_COOKIE_DOMAIN=example.com
TRAEFIK_FORWARD_AUTH_COOKIE_LIFETIME=43200
TRAEFIK_FORWARD_AUTH_LOGOUT_REDIRECT=
## Select the OAuth provider you want to use: (gitea, github, or google are provided)
TRAEFIK_FORWARD_AUTH_SELECTED_PROVIDER=gitea
## OAuth provider config:
TRAEFIK_FORWARD_AUTH_DEFAULT_PROVIDER=generic-oauth
TRAEFIK_FORWARD_AUTH_PROVIDERS_GENERIC_OAUTH_AUTH_URL=https://git.example.com/login/oauth/authorize
TRAEFIK_FORWARD_AUTH_PROVIDERS_GENERIC_OAUTH_TOKEN_URL=https://git.example.com/login/oauth/access_token
TRAEFIK_FORWARD_AUTH_PROVIDERS_GENERIC_OAUTH_USER_URL=https://git.example.com/api/v1/user
TRAEFIK_FORWARD_AUTH_PROVIDERS_GENERIC_OAUTH_CLIENT_ID=
TRAEFIK_FORWARD_AUTH_PROVIDERS_GENERIC_OAUTH_CLIENT_SECRET=
TRAEFIK_FORWARD_AUTH_PROVIDERS_GENERIC_OAUTH_SCOPE=
TRAEFIK_FORWARD_AUTH_PROVIDERS_GOOGLE_CLIENT_ID=
TRAEFIK_FORWARD_AUTH_PROVIDERS_GOOGLE_CLIENT_SECRET=
## Example for Gitea:
## Create new Oauth2 app here: https://git.example.com/user/settings/applications
#TRAEFIK_FORWARD_AUTH_DEFAULT_PROVIDER=generic-oauth
## Change the domain to your own gitea instance URL (keep the paths unchanged):
#TRAEFIK_FORWARD_AUTH_PROVIDERS_GENERIC_OAUTH_AUTH_URL=https://git.example.com/login/oauth/authorize
#TRAEFIK_FORWARD_AUTH_PROVIDERS_GENERIC_OAUTH_TOKEN_URL=https://git.example.com/login/oauth/access_token
#TRAEFIK_FORWARD_AUTH_PROVIDERS_GENERIC_OAUTH_USER_URL=https://git.example.com/api/v1/user
#TRAEFIK_FORWARD_AUTH_PROVIDERS_GENERIC_OAUTH_CLIENT_ID=
#TRAEFIK_FORWARD_AUTH_PROVIDERS_GENERIC_OAUTH_CLIENT_SECRET=
## Example for Github:
## Create new Oauth app here: https://github.com/settings/applications/new
# TRAEFIK_FORWARD_AUTH_DEFAULT_PROVIDER=generic-oauth
# TRAEFIK_FORWARD_AUTH_PROVIDERS_GENERIC_OAUTH_AUTH_URL=https://github.com/login/oauth/authorize
# TRAEFIK_FORWARD_AUTH_PROVIDERS_GENERIC_OAUTH_TOKEN_URL=https://github.com/login/oauth/access_token
# TRAEFIK_FORWARD_AUTH_PROVIDERS_GENERIC_OAUTH_USER_URL=https://api.github.com/user
# TRAEFIK_FORWARD_AUTH_PROVIDERS_GENERIC_OAUTH_CLIENT_ID=
# TRAEFIK_FORWARD_AUTH_PROVIDERS_GENERIC_OAUTH_CLIENT_SECRET=
## Example for Google:
## Create new Oauth app here: https://console.developers.google.com/
## See https://github.com/thomseddon/traefik-forward-auth#google
# TRAEFIK_FORWARD_AUTH_DEFAULT_PROVIDER=google
# TRAEFIK_FORWARD_AUTH_PROVIDERS_GOOGLE_CLIENT_ID=
# TRAEFIK_FORWARD_AUTH_PROVIDERS_GOOGLE_CLIENT_SECRET=
## Step-CA root certificates:
TRAEFIK_FORWARD_AUTH_STEP_CA_ENABLED=false
TRAEFIK_FORWARD_AUTH_STEP_CA_ENDPOINT=https://ca.example.com
TRAEFIK_FORWARD_AUTH_STEP_CA_FINGERPRINT=
## Delete all other CAs that came from the alpine ca-certificates:
TRAEFIK_FORWARD_AUTH_STEP_CA_ZERO_CERTS=false