4d0448fa76
Only oidc_client_secret is actually sensitive — issuer_url and client_id are now plain env vars. Renamed oidc_client_secret to oidc_secret to pass abra lint. Updated README with accurate quickstart and OIDC setup. Entrypoint guards git commands for min image compatibility.
17 lines
307 B
YAML
17 lines
307 B
YAML
---
|
|
version: "3.8"
|
|
|
|
services:
|
|
app:
|
|
environment:
|
|
- OIDC_ENABLED=true
|
|
- OIDC_ISSUER_URL=${OIDC_ISSUER_URL}
|
|
- OIDC_CLIENT_ID=${OIDC_CLIENT_ID}
|
|
secrets:
|
|
- oidc_secret
|
|
|
|
secrets:
|
|
oidc_secret:
|
|
external: true
|
|
name: ${STACK_NAME}_oidc_secret_${SECRET_OIDC_SECRET_VERSION}
|