From d14a54fcef78d71441ff3864946be41d3893cee9 Mon Sep 17 00:00:00 2001
From: Enno Richter <enno@nerdworks.de>
Date: Tue, 18 Jun 2024 11:26:00 +0200
Subject: [PATCH] nixos/oauth2-proxy: prevent redirect loop when running on
 single domain (#319305)

---
 nixos/modules/services/security/oauth2-proxy-nginx.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/nixos/modules/services/security/oauth2-proxy-nginx.nix b/nixos/modules/services/security/oauth2-proxy-nginx.nix
index 44bf56233e95..2dffeb993803 100644
--- a/nixos/modules/services/security/oauth2-proxy-nginx.nix
+++ b/nixos/modules/services/security/oauth2-proxy-nginx.nix
@@ -73,6 +73,7 @@ in
       virtualHosts.${cfg.domain}.locations."/oauth2/" = {
         proxyPass = cfg.proxy;
         extraConfig = ''
+          auth_request off;
           proxy_set_header X-Scheme                $scheme;
           proxy_set_header X-Auth-Request-Redirect $scheme://$host$request_uri;
         '';