DOMAIN causes unexpected behaviour #2

New Issue

2023-11-17T12:19:55Z

3wordchant commented

2023-11-17 12:19:55 +00:00

The DOMAIN environment variable has a special meaning for traefik-forward-auth: it establishes a list of allowed email domains for SSO https://github.com/thomseddon/traefik-forward-auth#user-restriction

This means that abra's default behaviour of setting DOMAIN causes unexpected behaviour. If DOMAIN=auth.example.com, only users with emails like user@auth.example.com will be allowed in 😞

The `DOMAIN` environment variable has a special meaning for `traefik-forward-auth`: it establishes a list of allowed email domains for SSO https://github.com/thomseddon/traefik-forward-auth#user-restriction This means that `abra`'s default behaviour of setting `DOMAIN` causes unexpected behaviour. If `DOMAIN=auth.example.com`, only users with emails like `user@auth.example.com` will be allowed in 😞

moritz commented

2023-11-17 23:13:46 +00:00

If the DOMAIN variable is already used by a container, I would suggest to rename the variable. Use an env like TRAEFIK_DOMAIN and place DOMAIN=${TRAEFIK_DOMAIN} in the compose file under environment.

If the `DOMAIN` variable is already used by a container, I would suggest to rename the variable. Use an env like `TRAEFIK_DOMAIN` and place `DOMAIN=${TRAEFIK_DOMAIN}` in the compose file under `environment`.

👍 1

3wordchant commented

2023-12-02 15:30:40 +00:00

@moritz thanks for the suggestion! Maybe I'm misunderstanding your suggestion, but the problem seems to be that, if DOMAIN is set in the container, traefik-forward-auth behaves unexpectedly – and I can't find a way to unset it.

@moritz thanks for the suggestion! Maybe I'm misunderstanding your suggestion, but the problem seems to be that, if `DOMAIN` is set in the container, `traefik-forward-auth` behaves unexpectedly – and I can't find a way to unset it.

moritz commented

2023-12-07 15:56:45 +00:00

If you set DOMAIN=${TRAEFIK_DOMAIN} in the compose file and set TRAEFIK_DOMAIN="" in your .env file you unset the DOMAIN variable for the container. If you never need the DOMAIN variable you could also directly set DOMAIN="" in the compose file.

If you set `DOMAIN=${TRAEFIK_DOMAIN}` in the compose file and set `TRAEFIK_DOMAIN=""` in your .env file you unset the `DOMAIN` variable for the container. If you never need the `DOMAIN` variable you could also directly set `DOMAIN=""` in the compose file.

Sign in to join this conversation.

2 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: coop-cloud/traefik-forward-auth#2