OAuth2/OIDC authentication reverse proxy (Google, GitHub, GitLab)
1.2K
OAuth2/OIDC authentication reverse proxy. Protect any web application with Google, GitHub, GitLab, or any OIDC provider.
docker run -p 4180:4180 \
-e OAUTH2_PROVIDER=google \
-e OAUTH2_CLIENT_ID=xxx \
-e OAUTH2_CLIENT_SECRET=xxx \
-e OAUTH2_UPSTREAM=http://app:8080 \
-e OAUTH2_EMAIL_DOMAIN=example.com \
ogulcanaydogan/oauth2-proxy
| Variable | Description | Default |
|---|---|---|
OAUTH2_PROVIDER | Auth provider (google/github/gitlab/oidc) | google |
OAUTH2_CLIENT_ID | OAuth2 client ID (required) | - |
OAUTH2_CLIENT_SECRET | OAuth2 client secret (required) | - |
OAUTH2_COOKIE_SECRET | Cookie encryption secret (auto-generated if empty) | - |
OAUTH2_UPSTREAM | Upstream URL to proxy to | http://localhost:8080 |
OAUTH2_LISTEN | Listen address | 0.0.0.0:4180 |
OAUTH2_EMAIL_DOMAIN | Allowed email domain(s) | * |
OAUTH2_REDIRECT_URL | OAuth2 redirect URL | - |
OAUTH2_OIDC_ISSUER | OIDC issuer URL (for oidc provider) | - |
OAUTH2_SKIP_AUTH_ROUTES | Comma-separated routes to skip auth | - |
OAUTH2_COOKIE_SECURE | Secure cookie flag | true |
services:
app:
image: nginx
auth:
image: ogulcanaydogan/oauth2-proxy
ports:
- "4180:4180"
environment:
- OAUTH2_PROVIDER=github
- OAUTH2_CLIENT_ID=${GITHUB_CLIENT_ID}
- OAUTH2_CLIENT_SECRET=${GITHUB_CLIENT_SECRET}
- OAUTH2_UPSTREAM=http://app:80
- OAUTH2_EMAIL_DOMAIN=*
MIT
Content type
Image
Digest
sha256:101304e50…
Size
20 MB
Last updated
7 months ago
docker pull ogulcanaydogan/oauth2-proxy