summaryrefslogtreecommitdiff
path: root/hostnix/elmo/oidc.nix
diff options
context:
space:
mode:
Diffstat (limited to 'hostnix/elmo/oidc.nix')
-rw-r--r--hostnix/elmo/oidc.nix5
1 files changed, 5 insertions, 0 deletions
diff --git a/hostnix/elmo/oidc.nix b/hostnix/elmo/oidc.nix
index b2c34e5..7648e8c 100644
--- a/hostnix/elmo/oidc.nix
+++ b/hostnix/elmo/oidc.nix
@@ -51,4 +51,9 @@
"oidc-email-claim" = "sub";
};
};
+
+ # Kludge to bring up after KeyCloak (otherwise OIDC discovery fails). A simple
+ # ordering dependency isn't enough because keycloak.service is active before
+ # KeyCloak responds to requests.
+ systemd.services.oauth2_proxy.serviceConfig.RestartSec = 5;
}