From 843b9aef796a9238a9f732a9ce221a49293a5fcd Mon Sep 17 00:00:00 2001
From: Dmitriy Kholkin <ataraxiadev@ataraxiadev.com>
Date: Sun, 4 Feb 2024 16:45:27 +0300
Subject: [PATCH] fix ocis apps login

---
 profiles/servers/ocis.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/profiles/servers/ocis.nix b/profiles/servers/ocis.nix
index 3093b88..3ef3c11 100644
--- a/profiles/servers/ocis.nix
+++ b/profiles/servers/ocis.nix
@@ -1,7 +1,6 @@
-{ config, lib, pkgs, inputs, ... }: {
+{ config, lib, inputs, ... }: {
   sops.secrets.ocis-env-file = {
     owner = "ocis";
-    mode = "0400";
     sopsFile = inputs.self.secretsDir + /home-hypervisor/ocis.yaml;
     restartUnits = [ "ocis-server.service" ];
   };
@@ -24,7 +23,8 @@
       # OIDC Settings
       OCIS_OIDC_ISSUER = "https://auth.ataraxiadev.com/application/o/owncloud-web-client/";
       PROXY_AUTOPROVISION_ACCOUNTS = "true";
-      PROXY_OIDC_ACCESS_TOKEN_VERIFY_METHOD = "jwt";
+      PROXY_OIDC_ACCESS_TOKEN_VERIFY_METHOD = "none";
+      # PROXY_OIDC_ACCESS_TOKEN_VERIFY_METHOD = "jwt";
       PROXY_OIDC_REWRITE_WELLKNOWN = "true";
       PROXY_ROLE_ASSIGNMENT_DRIVER = "oidc";
       PROXY_ROLE_ASSIGNMENT_OIDC_CLAIM = "groups";