From 4a85789f642b6e113ac721041577f4c0c51f90b2 Mon Sep 17 00:00:00 2001
From: kat <kat@inskip.me>
Date: Sun, 17 Jul 2022 21:41:42 -0700
Subject: [PATCH] fix: keycloak redirect to /auth

---
 services/keycloak.nix | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/services/keycloak.nix b/services/keycloak.nix
index 0cb18e33..5754f7e3 100644
--- a/services/keycloak.nix
+++ b/services/keycloak.nix
@@ -55,7 +55,12 @@ in {
   services.nginx.virtualHosts."auth.${config.network.dns.domain}" = {
     useACMEHost = "domain-auth";
     forceSSL = true;
-    locations = { "/".proxyPass = "http://127.0.0.1:8089"; };
+    locations = {
+      "/".extraConfig = ''
+        return 301 /auth;
+      '';
+      "/auth".proxyPass = "http://127.0.0.1:8089/auth";
+    };
   };
 
   deploy.tf.dns.records.services_keycloak = {