oauth2-proxy.md

OAuth2 Proxy Setup Guide

Overview

This guide explains how to configure OAuth2 Proxy for authentication using Google OAuth in production. Development setup does not include OAuth2 Proxy by default.

---

Google OAuth Setup

1. Go to the Google Cloud Console
2. Create a new project or select an existing one
3. Navigate to APIs & Services > Credentials
4. Click Create Credentials > OAuth client ID
5. Set application type to Web application
6. Add the following to Authorized redirect URIs:
   • https://<your-domain>/oauth2/callback
7. Save and copy your Client ID and Client Secret

• See Generating a Cookie Secret (official docs) for more options.

Note:

• For production, use docker-compose.prod.yml and set all variables as above.
• For development, OAuth2 Proxy is not enabled by default.
• Adjust domain values to match your deployment.