auth_proxy_nginx/docker-compose.yaml at main · simel0/auth_proxy_nginx · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
version: '3.8'

services:
  nginx:
    image: nginx:alpine
    ports:
      - '80:80'
    volumes:
      - ./nginx/nginx.conf:/etc/nginx/nginx.conf:ro
      - ./nginx/default.conf:/etc/nginx/conf.d/default.conf:ro
      - ./nginx/html:/usr/share/nginx/html:ro
    depends_on:
      - api
      - oauth2-proxy
    networks:
      - app-network

  api:
    build: ./api
    expose:
      - '8000'
    volumes:
      - ./api/html:/app/html:ro
    networks:
      - app-network

  oauth2-proxy:
    image: quay.io/oauth2-proxy/oauth2-proxy:latest
    expose:
      - '4180'
    environment:
      - OAUTH2_PROXY_HTTP_ADDRESS=0.0.0.0:4180
      - OAUTH2_PROXY_CLIENT_ID=${GOOGLE_CLIENT_ID}
      - OAUTH2_PROXY_CLIENT_SECRET=${GOOGLE_CLIENT_SECRET}
      - OAUTH2_PROXY_COOKIE_SECRET=${COOKIE_SECRET}
      - OAUTH2_PROXY_EMAIL_DOMAINS=*
      - OAUTH2_PROXY_PROVIDER=google
      - OAUTH2_PROXY_REDIRECT_URL=http://localhost/oauth2/callback
      - OAUTH2_PROXY_UPSTREAMS=http://api:8000/
      - OAUTH2_PROXY_COOKIE_SECURE=false
      - OAUTH2_PROXY_PASS_BASIC_AUTH=true
      - OAUTH2_PROXY_PASS_USER_HEADERS=true
      - OAUTH2_PROXY_HTPASSWD_FILE=/etc/oauth2-proxy/htpasswd
      - OAUTH2_PROXY_SKIP_PROVIDER_BUTTON=false
      - OAUTH2_PROXY_COOKIE_REFRESH=0
      - OAUTH2_PROXY_COOKIE_EXPIRE=0
      - OAUTH2_PROXY_SET_XAUTHREQUEST=true
      - OAUTH2_PROXY_SKIP_AUTH_ROUTES=^/$
    volumes:
      - ./oauth2-proxy/htpasswd:/etc/oauth2-proxy/htpasswd:ro
    networks:
      - app-network

networks:
  app-network:
    driver: bridge