default-provider = oidc

# Cookie signing nonce, replace this with something random
secret = {{ traefik.oidc.cookie_secret }}

# This client id / secret is defined in keycloak-realm-config/master-realm.json
providers.oidc.client-id = {{ traefik.oidc.client_id }}
providers.oidc.client-secret = {{ traefik.oidc.client_secret }}
providers.oidc.issuer-url = {{ traefik.oidc.issuer_url }}

log-level = error

cookie-domain = tobiasmanske.de
auth-host = traefik-fa.tobiasmanske.de

# Add authorized users here
{% for user in traefik.oidc.whitelist %}
whitelist = {{ user }}
{% endfor %}