SSO wired up! Insanity overcome

Closes autonomic-cooperative/traefik#2.

configs/prod/file-provider.yml

@@ -0,0 +1,9 @@
+---
+http:
+  middlewares:
+    keycloak:
+      forwardAuth:
+        address: "http://traefik-forward-auth:4181"
+        trustForwardHeader: true
+        authResponseHeaders:
+          - "X-Forwarded-User"

configs/prod/forward.ini.tmpl

@@ -0,0 +1,13 @@
+secret = {{ secret "secret-nonce-v1" }}
+
+default-provider = oidc
+
+providers.oidc.issuer-url = {{ secret "oidc-issuer-url-v1" }}
+providers.oidc.client-id = {{ secret "oidc-client-id-v1" }}
+providers.oidc.client-secret = {{ secret "oidc-client-secret-v1" }}
+
+log-level = error
+
+cookie-domain = swarm.autonomic.zone
+
+auth-host = auth.swarm.autonomic.zone

configs/prod/traefik.yml

@@ -8,6 +8,8 @@ providers:
     exposedByDefault: false
     network: "proxy"
     swarmMode: true
+  file:
+    filename: /etc/traefik/file-provider.yml
 
 api:
   dashboard: true