3 Commits

Author SHA1 Message Date
ab 80b14bee5a Update README.md
Build and Publish / Build and Publish Docker Image (push) Successful in 4m22s
2026-05-05 15:41:39 +00:00
ab 4ebb718106 Add LICENSE
Build and Publish / Build and Publish Docker Image (push) Successful in 5m37s
2026-05-05 15:41:10 +00:00
ab cbd07b7e3c Update README.md
Build and Publish / Build and Publish Docker Image (push) Successful in 4m23s
2026-05-05 15:39:31 +00:00
2 changed files with 16 additions and 5 deletions
+13
View File
@@ -0,0 +1,13 @@
DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
Version 2, December 2004
Copyright (C) 2004 Sam Hocevar <sam@hocevar.net>
Everyone is permitted to copy and distribute verbatim or modified
copies of this license document, and changing it is allowed as long
as the name is changed.
DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
0. You just DO WHAT THE FUCK YOU WANT TO.
+3 -5
View File
@@ -1,6 +1,6 @@
# rsauth2-proxy # rsauth2-proxy
Auth proxy for [Traefik ForwardAuth](https://doc.traefik.io/traefik/middlewares/http/forwardauth/) with Keycloak OIDC. Single instance protects all services in a cluster. Replaces oauth2-proxy. Auth proxy for [Traefik ForwardAuth](https://doc.traefik.io/traefik/middlewares/http/forwardauth/) with Keycloak OIDC. Single instance protects all services in a Kubernetes cluster. Replaces oauth2-proxy.
## How it works ## How it works
@@ -107,7 +107,7 @@ spec:
spec: spec:
containers: containers:
- name: auth-proxy - name: auth-proxy
image: ghcr.io/your-org/rsauth2-proxy:latest image: ultradesu/rsauth2-proxy:0.1.0
ports: ports:
- containerPort: 8080 - containerPort: 8080
envFrom: envFrom:
@@ -197,8 +197,6 @@ cargo build --release
docker build -t rsauth2-proxy . docker build -t rsauth2-proxy .
``` ```
Produces a static musl binary in a `FROM scratch` image (~10MB).
## Security properties ## Security properties
- **Encrypted cookies** — AES-256-GCM, not just signed. Cookie contents cannot be read or tampered with without the key. - **Encrypted cookies** — AES-256-GCM, not just signed. Cookie contents cannot be read or tampered with without the key.
@@ -221,4 +219,4 @@ On successful authentication, the following headers are set on the request forwa
## License ## License
MIT WTFPL