https://github.com/firebase/chef-google_auth_proxy
Chef Provider for Google Auth Proxy
https://github.com/firebase/chef-google_auth_proxy
Last synced: 7 months ago
JSON representation
Chef Provider for Google Auth Proxy
- Host: GitHub
- URL: https://github.com/firebase/chef-google_auth_proxy
- Owner: firebase
- License: mit
- Archived: true
- Fork: true (klamontagne/chef-google_auth_proxy)
- Created: 2015-06-19T00:34:35.000Z (almost 11 years ago)
- Default Branch: master
- Last Pushed: 2015-06-19T00:48:11.000Z (almost 11 years ago)
- Last Synced: 2024-09-28T17:01:36.228Z (over 1 year ago)
- Language: Ruby
- Homepage: http://word.bitly.com/post/47548678256/google-auth-proxy
- Size: 120 KB
- Stars: 3
- Watchers: 60
- Forks: 13
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
Forked by mtse@google.com of the Firebase team to run correctly on CentOS with Berkshelf cookbook manager.
----------------------------------------------------------------------------------------------------------
google_auth_proxy Cookbook
==========================
This cookbook sets up a [Google Auth Proxy](https://github.com/bitly/google_auth_proxy) instance provider.
Dependencies
------------
This cookbook requires `golang` (for source installs only) and **must have Go version 1.1.1+**
It only supports Upstart as a service provider at the moment.
How to use the provider
-----------------------
```ruby
# Proxy definition example
# Get your own keys at https://code.google.com/apis/console
google_auth_proxy_install "my-app" do
client_id "123456.apps.googleusercontent.com"
client_secret "my_secret"
google_apps_domains ["mycompany.com"] # Restrict login to a set of Google apps domains
cookie_domain "my-app.mycompany.com"
redirect_url "http://my-app.mycompany.com/oauth2/callback"
listen_address "127.0.0.1:4180"
upstreams ["http://127.0.0.1:4181/"]
end
```
The cookie secret will be stored as a node attribute, one for each resource name, under `[:google_auth][:cookie_secret]`.
An Upstart service for the proxy will be created as `google_auth_proxy_my-app`.
nginx example vhost config
--------------------
For more details, see the README of [Google Auth Proxy](https://github.com/bitly/google_auth_proxy).
```
# Send everything through the Google Auth Proxy
server {
listen 0.0.0.0:80;
server_name my-app.mycompany.com;
access_log /var/log/nginx/my-app.mycompany.com.access.log;
location / {
proxy_pass http://127.0.0.1:4180;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Scheme $scheme;
proxy_connect_timeout 1;
proxy_send_timeout 30;
proxy_read_timeout 30;
}
}
# The actual service
server {
listen 127.0.0.1:4181;
location / {
root /var/www;
index index.html index.htm;
}
```
License and Authors
-------------------
Authors: De Marque Inc.