From 2ae934f1b60161d727c3c673f65dd95f4125b727 Mon Sep 17 00:00:00 2001
From: Joe Mou <dev@mou.fo>
Date: Thu, 15 Feb 2024 12:39:20 -0500
Subject: Kludgy fix for oauth2_proxy on boot

---
 hostnix/elmo/oidc.nix | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/hostnix/elmo/oidc.nix b/hostnix/elmo/oidc.nix
index b2c34e5..7648e8c 100644
--- a/hostnix/elmo/oidc.nix
+++ b/hostnix/elmo/oidc.nix
@@ -51,4 +51,9 @@
       "oidc-email-claim" = "sub";
     };
   };
+
+  # Kludge to bring up after KeyCloak (otherwise OIDC discovery fails). A simple
+  # ordering dependency isn't enough because keycloak.service is active before
+  # KeyCloak responds to requests.
+  systemd.services.oauth2_proxy.serviceConfig.RestartSec = 5;
 }
-- 
cgit v1.3.1