From 73edceae60e0930897815a791fe71afd3b876a30 Mon Sep 17 00:00:00 2001
From: Andrey Kartashov <gorilych@gmail.com>
Date: Sat, 2 Nov 2019 21:35:37 +0700
Subject: [PATCH] security: fix wildcard domains allowed by default in
 oauth-proxy

See https://github.com/pusher/oauth2_proxy/issues/73
---
 apps/system/oauth2-proxy/values.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/apps/system/oauth2-proxy/values.yaml b/apps/system/oauth2-proxy/values.yaml
index 481a4f5..d270a45 100644
--- a/apps/system/oauth2-proxy/values.yaml
+++ b/apps/system/oauth2-proxy/values.yaml
@@ -1,6 +1,9 @@
 oauth2-proxy:
   config:
     existingSecret: oauth2-proxy
+    configFile: |-
+      email_domains = []
+      upstreams = [ "file:///dev/null" ]
   extraArgs:
     provider: github
     cookie-domain: .gorilych.ru