diff --git a/hosts/auth/secrets.yaml b/hosts/auth/secrets.yaml
index 7cae111e..1e4a5d70 100644
--- a/hosts/auth/secrets.yaml
+++ b/hosts/auth/secrets.yaml
@@ -1,5 +1,5 @@
 dex:
-    environment: ENC[AES256_GCM,data:X213Nj0ftMSdEG7Z18hceghX3w9wBV2q4Z/q7enbZm/rbZKM2L2SBZnCtf7NGoFuZbePe95HR+puKCzmHKHt891So6Uq11OA5DvMvl3IdNKkXpHwS8HicIZWTGwtle0CaESzJqI7LJl1ajzXFX/fo3RClGz8V9D5cFza54N/29xKrxyRd+vu9zlXN6ZX/w==,iv:wHLq9shvvrzImMRoYInlWQVACNGqazDEHqkcp25zHHw=,tag:xhaX0oK0qxuQigWXrwRfwQ==,type:str]
+    environment: ENC[AES256_GCM,data:pMU+2qCkzc6G7/U4iVgxQzJPpmdii7AHgrgW9AjedVZt2bh2gXNpsbEth236/ttQGphtBx/5Q6KnObduOvp3ReKOReYzP1SkHTNg9lgumfjflDY07qlzx4iKEmgyXsxjpZ9r9giWcK0Iav4bTn+1qFJVQJDLQT1nh+h8/vBD1RiTg1FQOEXx4mWdn8dIIIsUKpQ6a0xNNnmO7awXsLsbIjwWtefC0agafoHeQVM1MOrAgNhKFDwDnkrQN4nPdzzFClZyCTvh74orNQho9hO1TWSkIWKW5uJyDwtWsYf2ZBNaCuq+1NvDO//L0gXsSbH5triHIn602Hk6tnIp4J0MZB4rSfcrp90iG6c8XW3ohHUC+FkMNJ4wXCblHLGjkbjp7G5+vpuuB5Vg,iv:2lalbBUbCrnTiJgvWDc/GCQPfmZIviouloYysBQ9sds=,tag:rF30GzHyGeAHZ+9kzqm3Nw==,type:str]
 portunus:
     users:
         admin-password: ENC[AES256_GCM,data:Hxcj/ZxBeUmUDh+R6NWGe2fVTtd56d1VgPGKUG5mIf4=,iv:X6/3hk1SylA9xWNkrE7Ynu7jgY7YDU/rmJeALKfDVRU=,tag:y8RUy45n0EcpsYCrmjLrPQ==,type:str]
@@ -28,8 +28,8 @@ sops:
             OHlKSmZ0WGpJNTNlbGJZdWsvV2JVSjQKChNZeeT4l/ZiBMC0SZXY8wsNnZBtM9vw
             WfVljqnQTMODkoLjfxcvET2xZjSHSI0wjULjMAgg67lRUEG2bxMp3g==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2022-12-23T23:08:05Z"
-    mac: ENC[AES256_GCM,data:rhV9INEgilWifP2XH+9wB1kiYOc+syjHBvhewpoukpbFsUYgLW9ISPjIlTFlAEP85dlCl0FwhR0SA/uJjC7rZOjVbmn4Dj81E+gB/3MfxTqHuAce3tPDdOc5KJrFr8EMw7K3F/sGXeRsfi/rmqDg5dY3KxfD2BYJs1SCbdM5dGw=,iv:b3Gncab2ASlyu5Z8X1JHd490eK8XEf4sFd6Y5X3OYng=,tag:Di0zen2aMdZtvGO+JAG30Q==,type:str]
+    lastmodified: "2022-12-26T03:23:07Z"
+    mac: ENC[AES256_GCM,data:13FewFzAyHTtD/IfOpUreY/G3p73GkX/0ute7y/JVDPvKVRLuA4HmKcul361AqDwAjKiJ0QtASmydld70Dwi9P5IuA8frwlF17y7/Sy0N4IncpH0BiP5VK2+Uv+VH1+gTS++QtTVVee1Nz0iAAx7QMbEZ3aFKu5RMNAupq9iJx0=,iv:Rn25HctJlC0J26zSCQI1gUjA5sKQKesUl//S9Ij0fa4=,tag:+B+MU9v6wR5L0HnN6iTxew==,type:str]
     pgp:
         - created_at: "2022-07-31T16:18:25Z"
           enc: |
diff --git a/overlays/default.nix b/overlays/default.nix
index 268ab659..aa94fb94 100644
--- a/overlays/default.nix
+++ b/overlays/default.nix
@@ -18,6 +18,20 @@ with final; {
     doCheck = false;
   });
 
+  dex-oidc = prev.dex-oidc.override {
+    buildGoModule = args: buildGoModule (args // {
+      patches = args.patches or [ ] ++ [
+        # remember session
+        (fetchpatch {
+          url = "https://github.com/dexidp/dex/commit/dd0fb05386ce89c74381ce49e903cc10b987459e.patch";
+          sha256 = "sha256-71py0pysgS3jDkKeqD/K4KJ821bolz/4PTjt2rDdUy8=";
+        })
+      ];
+
+      vendorSha256 = "sha256-BxFiRHOGIJf3jTVtrw/QbnvG5gyfwAKQGd3IiWw5iVc=";
+    });
+  };
+
   dump1090-influxdb = callPackage ./dump1090-influxdb { };
 
   dump1090_rs = callPackage ./dump1090_rs.nix { };