From 9d3dbea472d954150b01e4a10935820c68bb4525 Mon Sep 17 00:00:00 2001
From: Sheogorath <sheogorath@shivering-isles.com>
Date: Mon, 11 Sep 2023 19:38:35 +0200
Subject: [PATCH] fix(nextcloud): Hardcode default scope

References:
https://github.com/oauth2-proxy/oauth2-proxy/issues/2222
---
 apps/k8s01/nextcloud/oauth2.yaml | 17 +++++++++--------
 1 file changed, 9 insertions(+), 8 deletions(-)

diff --git a/apps/k8s01/nextcloud/oauth2.yaml b/apps/k8s01/nextcloud/oauth2.yaml
index cfec185e7..674feca63 100644
--- a/apps/k8s01/nextcloud/oauth2.yaml
+++ b/apps/k8s01/nextcloud/oauth2.yaml
@@ -12,8 +12,8 @@ sops:
     azure_kv: []
     hc_vault: []
     age: []
-    lastmodified: "2023-05-16T23:23:57Z"
-    mac: ENC[AES256_GCM,data:VKj4LE+zSVSINvMomD1LVWxIAfwZH3Y3PnCQZtx/tK82kNpRCpwHVrc5YhDEOOhCSi5sN3QmbgTUGAbhhXyXHsWSE+nxdNDrnGAlEqk0T/oYHOR6gj2sXenuYpbVkD4HpMrZSDNduPgvXr6E5qn8QIxe17c5197Fv/1C5lewGCM=,iv:v4Z1dnsrG2ByyZH1JOlL2yDXjAhbJL8w8geblpvwIEc=,tag:DjbtG4Lgy4NC8HF59hRb9g==,type:str]
+    lastmodified: "2023-09-11T17:38:16Z"
+    mac: ENC[AES256_GCM,data:O5xLqcBAs1+1oI9LFZ7i23aO17+MAmMK8lYBqM813b/tafHC2sig2ScYlh6zch8Qim/Rwqpsjtgt/ftSr3lF1LGfx3iuHxxHHoxJ7qE5/o68ZX1PfFqmcrFiZN5jsGOSagpsDQif++eW9i7XeY4VjRDow3V6dr/okjgDYgQiklM=,iv:7hKM3WTeM0Lwk+iOCuLv4kHjcromRNb4S2QY9GzUNpg=,tag:z6mG9yQxoUmLLtIMJz8xag==,type:str]
     pgp:
         - created_at: "2022-01-22T04:06:16Z"
           enc: |-
@@ -91,6 +91,7 @@ spec:
             allowed-role: nextcloud:user
             whitelist-domain: ENC[AES256_GCM,data:chLUoWOlZsaMUbIfj8i0UTaFyztPHzwCbQ==,iv:m3zDPNaTU03cw/iILqjgl+2E7Bmg9LLKbjXLma4b/yk=,tag:tQMO48l/tRp3F403CFKW/g==,type:str]
             silence-ping-logging: "true"
+            scope: openid email profile
         replicaCount: 2
         securityContext:
             enabled: true
@@ -124,8 +125,8 @@ sops:
     azure_kv: []
     hc_vault: []
     age: []
-    lastmodified: "2023-05-16T23:23:57Z"
-    mac: ENC[AES256_GCM,data:VKj4LE+zSVSINvMomD1LVWxIAfwZH3Y3PnCQZtx/tK82kNpRCpwHVrc5YhDEOOhCSi5sN3QmbgTUGAbhhXyXHsWSE+nxdNDrnGAlEqk0T/oYHOR6gj2sXenuYpbVkD4HpMrZSDNduPgvXr6E5qn8QIxe17c5197Fv/1C5lewGCM=,iv:v4Z1dnsrG2ByyZH1JOlL2yDXjAhbJL8w8geblpvwIEc=,tag:DjbtG4Lgy4NC8HF59hRb9g==,type:str]
+    lastmodified: "2023-09-11T17:38:16Z"
+    mac: ENC[AES256_GCM,data:O5xLqcBAs1+1oI9LFZ7i23aO17+MAmMK8lYBqM813b/tafHC2sig2ScYlh6zch8Qim/Rwqpsjtgt/ftSr3lF1LGfx3iuHxxHHoxJ7qE5/o68ZX1PfFqmcrFiZN5jsGOSagpsDQif++eW9i7XeY4VjRDow3V6dr/okjgDYgQiklM=,iv:7hKM3WTeM0Lwk+iOCuLv4kHjcromRNb4S2QY9GzUNpg=,tag:z6mG9yQxoUmLLtIMJz8xag==,type:str]
     pgp:
         - created_at: "2022-01-22T04:06:16Z"
           enc: |-
@@ -191,8 +192,8 @@ sops:
     azure_kv: []
     hc_vault: []
     age: []
-    lastmodified: "2023-05-16T23:23:57Z"
-    mac: ENC[AES256_GCM,data:VKj4LE+zSVSINvMomD1LVWxIAfwZH3Y3PnCQZtx/tK82kNpRCpwHVrc5YhDEOOhCSi5sN3QmbgTUGAbhhXyXHsWSE+nxdNDrnGAlEqk0T/oYHOR6gj2sXenuYpbVkD4HpMrZSDNduPgvXr6E5qn8QIxe17c5197Fv/1C5lewGCM=,iv:v4Z1dnsrG2ByyZH1JOlL2yDXjAhbJL8w8geblpvwIEc=,tag:DjbtG4Lgy4NC8HF59hRb9g==,type:str]
+    lastmodified: "2023-09-11T17:38:16Z"
+    mac: ENC[AES256_GCM,data:O5xLqcBAs1+1oI9LFZ7i23aO17+MAmMK8lYBqM813b/tafHC2sig2ScYlh6zch8Qim/Rwqpsjtgt/ftSr3lF1LGfx3iuHxxHHoxJ7qE5/o68ZX1PfFqmcrFiZN5jsGOSagpsDQif++eW9i7XeY4VjRDow3V6dr/okjgDYgQiklM=,iv:7hKM3WTeM0Lwk+iOCuLv4kHjcromRNb4S2QY9GzUNpg=,tag:z6mG9yQxoUmLLtIMJz8xag==,type:str]
     pgp:
         - created_at: "2022-01-22T04:06:16Z"
           enc: |-
@@ -277,8 +278,8 @@ sops:
     azure_kv: []
     hc_vault: []
     age: []
-    lastmodified: "2023-05-16T23:23:57Z"
-    mac: ENC[AES256_GCM,data:VKj4LE+zSVSINvMomD1LVWxIAfwZH3Y3PnCQZtx/tK82kNpRCpwHVrc5YhDEOOhCSi5sN3QmbgTUGAbhhXyXHsWSE+nxdNDrnGAlEqk0T/oYHOR6gj2sXenuYpbVkD4HpMrZSDNduPgvXr6E5qn8QIxe17c5197Fv/1C5lewGCM=,iv:v4Z1dnsrG2ByyZH1JOlL2yDXjAhbJL8w8geblpvwIEc=,tag:DjbtG4Lgy4NC8HF59hRb9g==,type:str]
+    lastmodified: "2023-09-11T17:38:16Z"
+    mac: ENC[AES256_GCM,data:O5xLqcBAs1+1oI9LFZ7i23aO17+MAmMK8lYBqM813b/tafHC2sig2ScYlh6zch8Qim/Rwqpsjtgt/ftSr3lF1LGfx3iuHxxHHoxJ7qE5/o68ZX1PfFqmcrFiZN5jsGOSagpsDQif++eW9i7XeY4VjRDow3V6dr/okjgDYgQiklM=,iv:7hKM3WTeM0Lwk+iOCuLv4kHjcromRNb4S2QY9GzUNpg=,tag:z6mG9yQxoUmLLtIMJz8xag==,type:str]
     pgp:
         - created_at: "2022-01-22T04:06:16Z"
           enc: |-
-- 
GitLab