penpot/compose.oidc.yml

---
version: "3.8"

services:
  app:
    environment:
      - PENPOT_OIDC_CLIENT_ID
  penpot-backend:
    environment:
      - PENPOT_OIDC_CLIENT_SECRET_FILE=/run/secrets/oidc_client_secret
      - PENPOT_OIDC_CLIENT_ID
      - PENPOT_OIDC_BASE_URI
    secrets:
      - oidc_client_secret

secrets:
  oidc_client_secret:
    external: true
    name: ${STACK_NAME}_oidc_client_secret_${SECRET_OIDC_CLIENT_SECRET_VERSION}