From 2f1e0c381e04b25b8c64f260967691f4cf841127 Mon Sep 17 00:00:00 2001
From: Joe Mou <dev@mou.fo>
Date: Thu, 28 Sep 2023 21:12:24 -0400
Subject: Initial configuration of Home Assistant w/ oauth2-proxy for KeyCloak
 authentication

---
 hostnix/weebnix/configuration.nix | 7 +++++++
 1 file changed, 7 insertions(+)

(limited to 'hostnix/weebnix/configuration.nix')

diff --git a/hostnix/weebnix/configuration.nix b/hostnix/weebnix/configuration.nix
index f38148a..0e6591d 100644
--- a/hostnix/weebnix/configuration.nix
+++ b/hostnix/weebnix/configuration.nix
@@ -4,6 +4,7 @@
   imports = [
     ./dyndns.nix
     ./hardware-configuration.nix
+    ./home-assistant.nix
     ./syncthing.nix
     ./system.nix
   ];
@@ -81,6 +82,12 @@
     '';
   };
 
+  # TODO remove upon switching to production certs
+  services.oauth2_proxy.extraConfig = {
+    "ssl-insecure-skip-verify" = true;
+    "ssl-upstream-insecure-skip-verify" = true;
+  };
+
   networking.firewall.allowedTCPPorts = [ 80 443 ];
 
   # This value determines the NixOS release from which the default
-- 
cgit v1.3.1