http_address = "0.0.0.0:8080"

reverse_proxy = true

## the OAuth Redirect URL.
# defaults to the "https://" + requested host header + "/oauth2/callback"
# redirect_url = "http://pihole.pcloud/oauth2/callback"

upstreams = [
    "http://pihole-web.app-pihole.svc.cluster.local/"
]

email_domains = [
    "*"
]

logging_filename = ""
logging_max_size = 100
logging_max_age = 7
logging_local_time = true
logging_compress = false
standard_logging = true
standard_logging_format = "[{{.Timestamp}}] [{{.File}}] {{.Message}}"
request_logging = true
request_logging_format = "{{.Client}} - {{.Username}} [{{.Timestamp}}] {{.Host}} {{.RequestMethod}} {{.Upstream}} {{.RequestURI}} {{.Protocol}} {{.UserAgent}} {{.StatusCode}} {{.ResponseSize}} {{.RequestDuration}}"
auth_logging = true
auth_logging_format = "{{.Client}} - {{.Username}} [{{.Timestamp}}] [{{.Status}}] {{.Message}}"

pass_basic_auth = true
pass_user_headers = true
pass_host_header = true

## The OAuth Client ID, Secret
client_id = "pihole"
client_secret = "1QpkwzJoZVlgjTnzfhhF3UfmVDVuKQQEWx4Qu3Oi9RM="

## Pass OAuth Access token to upstream via "X-Forwarded-Access-Token"
pass_access_token = false

## Cookie Settings
## Name     - the cookie name
## Secret   - the seed string for secure cookies; should be 16, 24, or 32 bytes
##            for use with an AES cipher when cookie_refresh or pass_access_token
##            is set
## Domain   - (optional) cookie domain to force cookies to (ie: .yourcompany.com)
## Expire   - (duration) expire timeframe for cookie
## Refresh  - (duration) refresh the cookie when duration has elapsed after cookie was initially set.
##            Should be less than cookie_expire; set to 0 to disable.
##            On refresh, OAuth token is re-validated.
##            (ie: 1h means tokens are refreshed on request 1hr+ after it was set)
## Secure   - secure cookies are only sent by the browser of a HTTPS connection (recommended)
## HttpOnly - httponly cookies are not readable by javascript (recommended)
cookie_name = "_oauth2_proxy_pihole"
cookie_secret = "123456789012345678901234567890--"
cookie_domains = "pihole.pcloud"
cookie_expire = "168h"
cookie_refresh = "100h"
cookie_secure = true
cookie_httponly = true

provider = "oidc"
oidc_issuer_url = "https://hydra.lekva.me/"
provider_display_name = "PCloud OIDC Provider"
profile_url = "https://accounts-ui.lekva.me"