Add firefly to test Remote-User authentication

2026-01-09 22:02:18 +01:00 · 2026-01-09 22:02:18 +01:00 · cba8dea9c7
commit cba8dea9c7
parent a70450af2a
3 changed files with 16 additions and 4 deletions
--- a/hosts/srv01.hf/default.nix
+++ b/hosts/srv01.hf/default.nix
@ -65,6 +65,17 @@
          "groups"
        ];
      };
+      firefly = {
+        secret = config.age.secrets."firefly-oidc-auth";
+        scopes = [
+          "openid"
+          "email"
+        ];
+        useClaimsFromUserInfo = true;
+        headers = [
+          { Name = "FFIII-User"; Value = "{{`{{ .claims.email }}`}}"; }
+        ];
+      };
    };
  };