From e125179918501d806e87dc170ab85d89db1f7795 Mon Sep 17 00:00:00 2001
From: Joe Mou <dev@mou.fo>
Date: Wed, 31 Dec 2025 00:10:33 -0800
Subject: Configure OIDC for Home Assistant

Replaces unmaintained header authentication behind oauth2-proxy.

Add OIDC client for Home Assistant:
- Callback URLs: https://ha.mou.fo/auth/oidc/callback
- Public Client

To link OIDC credentials with the existing joe user, temporarily set:
    auth_oidc.features.automatic_user_linking = true;
See https://github.com/christiaangoossens/hass-oidc-auth/blob/main/docs/configuration.md#migrating-from-ha-usernamepassword-users-to-oidc-users

Must login through either:
- https://ha.mou.fo/auth/oidc/welcome
- https://ha.mou.fo/auth/oidc/redirect
Injecting directly into the landing login page is pending
https://github.com/christiaangoossens/hass-oidc-auth/issues/19
---
 hostnix/elmo/home-assistant/auth_header.nix | 29 -----------------------------
 1 file changed, 29 deletions(-)
 delete mode 100644 hostnix/elmo/home-assistant/auth_header.nix

(limited to 'hostnix/elmo/home-assistant/auth_header.nix')

diff --git a/hostnix/elmo/home-assistant/auth_header.nix b/hostnix/elmo/home-assistant/auth_header.nix
deleted file mode 100644
index 480598e..0000000
--- a/hostnix/elmo/home-assistant/auth_header.nix
+++ /dev/null
@@ -1,29 +0,0 @@
-{
-  lib,
-  buildHomeAssistantComponent,
-  fetchFromGitHub,
-}:
-
-buildHomeAssistantComponent rec {
-  owner = "BeryJu";
-  domain = "auth_header";
-  version = "1.12";
-
-  src = fetchFromGitHub {
-    inherit owner;
-    repo = "hass-auth-header";
-    tag = "v${version}";
-    hash = "sha256-BPG/G6IM95g9ip2OsPmcAebi2ZvKHUpFzV4oquOFLPM=";
-  };
-
-  # isort: command not found
-  dontBuild = true;
-
-  meta = with lib; {
-    changelog = "https://github.com/BeryJu/hass-auth-header/releases/tag/v${version}";
-    description = "Home Assistant custom component which allows you to delegate authentication to a reverse proxy";
-    homepage = "https://github.com/BeryJu/hass-auth-header";
-    maintainers = with maintainers; [ mjm ];
-    license = licenses.gpl3;
-  };
-}
-- 
cgit v1.3.1