sso templating

.env.sample

@@ -3,7 +3,8 @@ TYPE=gitlab
 DOMAIN=gitlab.example.com
 
 REGISTRY_DOMAIN=registry.gitlab.example.com
-PAGES_DOMAIN=pages.gitlab.example.com
+# The Gitlab Pages domain must not be a subdomain of the main Gitlab domain
+PAGES_DOMAIN=pages.example.com
 
 ## Domain aliases
 EXTRA_DOMAINS=", `$REGISTRY_DOMAIN`, `$PAGES_DOMAIN`"
@@ -20,6 +21,6 @@ SECRET_RUNNER_TOKEN_VERSION=v1
 SSO=false
 ## Authentik Configuration
 # SSO=true
-# SSO_PROVIDER_HOST="authentik.mydomain.com"
+# SSO_PROVIDER_URL="https://authentik.mydomain.com/application/o/gitlab/"
 # ORG_NAME="My Organization"
-# SECRET_CLIENT_SSO_SECRET_VERSION=v1
+# SECRET_SSO_PROVIDER_SECRET_VERSION=v1