Apache configured to perform authentication of user before proxying traffic to an upstream service
3.6K
Apache httpd configured as a reverse proxy. It protects the upstream service using an OIDC provider like Azure AD.
This is packaged as a Docker container and it is available here https://hub.docker.com/r/richardjkendall/oidc-rproxy
The container uses a number of environment variables to pass in configuration. They are defined below:
| Variable | Purpose | Example |
|---|---|---|
| OIDC_PROVIDER_METADATA_URL | Metadata URL for the OIDC Provider | https://host.domain/.well-known/openid-configuration |
| OIDC_PROVIDER_JWKS_URI | URI for the JSON Web Key Set for the OIDC provider | https://host.server/keys |
| OIDC_CLIENT_ID | Client ID as configured for this application | n/a |
| OIDC_CLIENT_SECRET | Client secret as configured for this application | n/a |
| OIDC_CRYPTO_PASSPRHASE | Passphrase used to secure session cookies | n/a |
| OIDC_REMOTE_USER | Which claim to use to set the REMOTE_USER variable, defaults to 'email' if not supplied | email or preferred_username |
| OIDC_AUTH_COND | Any special authorisation rules to use. Defaults to 'valid-user' if not set, see note below. | n/a |
| DOMAIN | Domain where the proxy is deployed | service.domain.com |
| PORT | Port on which the proxy is running and exposed | 80 |
| SCHEME | URL scheme used to expose the proxy | https |
| UPSTREAM | host and port for the upstream service being projected by the proxy | upstream:port/ |
For more help filling this in, see the documentation for mod_auth_openidc here https://github.com/zmartzone/mod_auth_openidc/wiki/Authorization
Content type
Image
Digest
sha256:342f14a48…
Size
61.9 MB
Last updated
27 days ago
docker pull richardjkendall/oidc-rproxy