hosts/grafana/default.nix

@@ -50,8 +50,10 @@
           auth_url = "https://auth.c3d2.de/dex/auth";
           client_id = "grafana";
           client_secret = "$__file{${config.sops.secrets."grafana/client-secret".path}}";
+          disable_login_form = true; # only allow OAuth
           icon = "signin";
           name = "auth.c3d2.de";
+          oauth_auto_login = true; # redirect automatically to the only oauth provider
           role_attribute_path = "contains(groups[*], 'grafana-admins') && 'Admin'";
           # https://dexidp.io/docs/custom-scopes-claims-clients/
           scopes = "openid email groups profile offline_access";