anchor.diff:      pass-access-token = passAccessToken;
       pass-basic-auth = passBasicAuth;
       pass-host-header = passHostHeader;
  +    reverse-proxy = reverseProxy;
       proxy-prefix = proxyPrefix;
       profile-url = profileURL;
       redeem-url = redeemURL;
  
positive.code:   # command-line to launch oauth2_proxy.
    providerSpecificOptions = {
      azure = cfg: {
        azure.tenant = cfg.azure.tenant;
        resource = cfg.azure.resource;
      };
  
  
negative.code:   } // lib.optionalAttrs (cfg.htpasswd.file != null) {
      display-htpasswd-file = cfg.htpasswd.displayForm;
    } // lib.optionalAttrs tls.enable {
      tls-cert-file = tls.certificate;
      tls-key-file = tls.key;
      https-address = tls.httpsAddress;
    } // (getProviderOptions cfg cfg.provider) // cfg.extraConfig;
  
  