diff --git a/ccp/modules/ovis-compose.yml b/ccp/modules/ovis-compose.yml index 537812e0..60849946 100644 --- a/ccp/modules/ovis-compose.yml +++ b/ccp/modules/ovis-compose.yml @@ -11,7 +11,7 @@ services: - OAUTH2_PROXY_OIDC_ISSUER_URL=${OIDC_PRIVATE_URL} - OAUTH2_PROXY_CLIENT_ID=${OIDC_PRIVATE_CLIENT_ID} - OAUTH2_PROXY_CLIENT_SECRET=${OIDC_CLIENT_SECRET} - - OAUTH2_PROXY_COOKIE_SECRET=${IDMANAGER_AUTH_COOKIE_SECRET} + - OAUTH2_PROXY_COOKIE_SECRET=${OVIS_AUTH_COOKIE_SECRET} - OAUTH2_PROXY_COOKIE_NAME=_BRIDGEHEAD_oauth2_ovis - OAUTH2_PROXY_COOKIE_DOMAINS=.${HOST} - OAUTH2_PROXY_COOKIE_REFRESH=4m diff --git a/ccp/modules/ovis-setup.sh b/ccp/modules/ovis-setup.sh index 6ce6f3b1..2480d747 100644 --- a/ccp/modules/ovis-setup.sh +++ b/ccp/modules/ovis-setup.sh @@ -4,4 +4,5 @@ if [ -n "$ENABLE_OVIS" ]; then log INFO "OVIS setup detected -- will start OVIS services with local oauth2-proxy middleware." OVERRIDE+=" -f ./$PROJECT/modules/ovis-compose.yml" add_private_oidc_redirect_url "/oauth2-ovis/callback" -fi \ No newline at end of file + OVIS_AUTH_COOKIE_SECRET="$(generate_simple_password 'ovisCookieSecret' | head -c 16)" +fi