Skip to content

Instantly share code, notes, and snippets.

View bnfinet's full-sized avatar
💭
https://github.com/vouch/vouch-proxy

Benjamin Foote bnfinet

💭
https://github.com/vouch/vouch-proxy
21 followers · 9 following
View GitHub Profile
@bnfinet
bnfinet / allowed_emails.txt
Last active August 20, 2021 00:44
john.doe@yourdomain.com
jane.doe@yourdomain.com
jack.doe@yourdomain.com
jill.do@eyourdomain.com
@bnfinet
bnfinet / nginx.conf
Created February 3, 2021 04:18
nginx access_log including vouch proxy user
http {
log_format vouchlog "$time_local $remote_addr $request $http_referer $auth_resp_user $upstream_http_x_vouch_user $auth_resp_success $status";
# .....
server {
listen 80 default_server;
# .....
auth_request /validate;
@bnfinet
bnfinet / config.yml
Last active January 30, 2019 21:41
Vouch Proxy configuration for Google OAuth
# vouch proxy config
# bare minimum to get lasso running with google
vouch:
domains:
- yourcorp.com
- yourcorp.io
oauth:
provider: google
@bnfinet
bnfinet / nginx.conf
Last active January 30, 2019 21:43
nginx `auth_request` module configuration using Vouch Proxy
# https://github.com/vouch/vouch-proxy
# send all requests to the `/validate` endpoint for authorization
auth_request /validate;
location = /validate {
# /validate proxies all the requests to lasso
# lasso can also run behind the same nginx-revproxy
proxy_pass http://vouch.yourdomain.com:9090;
# lasso only acts on the request headers
@bnfinet
bnfinet / keybase.md
Last active January 6, 2017 20:22

Keybase proof

I hereby claim:

  • I am bnfinet on github.
  • I am bnf (https://keybase.io/bnf) on keybase.
  • I have a public key whose fingerprint is F7C0 B20A D9DA A156 7CA6 ABAF B7B9 E013 C4A1 2B6A

To claim this, I am signing this object: