oauth2-proxy.conf

provider = "github"

# OAuth2 settings
redirect_url = "http://localhost/oauth2/callback"
email_domains = ["*"]  # Allow all email domains
whitelist_domains = [".localhost"]  # Whitelist localhost domain

# GitHub scopes requested during OAuth
scope = "repo,read:user,user:email"

# Upstream applications that oauth2-proxy will authenticate and forward to
upstreams = ["http://localhost:8000", "http://webhosting:8000"]

# OAuth2-proxy options
pass_access_token = true  # Pass the GitHub OAuth access token to upstream
set_authorization_header = true  # Set the authorization header with the access token
set_xauthrequest = true  # Set additional X-Auth headers for the upstream app
pass_basic_auth = true  # Pass basic auth headers

# Cookie settings (disable secure cookies for local testing)
cookie_secure = false

# Proxy server listening address
http_address = "0.0.0.0:4180"