[mass update] fix supporting multiple domains while enforcing ssl

.env.sample

@@ -27,4 +27,5 @@ SMTP_USER=noreply@example.com
 #OIDC_NAME= #The user-facing name of your provider as it will be shown on the login page
 #OIDC_DISCOVERY_URL= #URL of the .well-known/openid-configuration endpoint for your OIDC provider
 #OIDC_CLIENT_ID=
+#OIDC_ISSUER_URL=
 #SECRET_OIDC_CLIENT_SECRET_VERSION=v1

alaconnect.yml

@@ -2,6 +2,7 @@ authentik:
     env:
         OIDC_NAME: "Authentik"
         OIDC_DISCOVERY_URL: "https://authentik.example.com/application/o/rallly/.well-known/openid-configuration"
+        OIDC_ISSUER_URL: "https://authentik.example.com/application/o/rallly/"
         OIDC_CLIENT_ID: rallly
     uncomment: 
         - compose.oidc.yml

compose.yml

@@ -3,7 +3,7 @@ version: "3.8"
 
 services:
   app:
-    image: lukevella/rallly:3.11.2
+    image: lukevella/rallly:4.0.2
     hostname: 0.0.0.0
     networks:
       - proxy
@@ -43,9 +43,9 @@ services:
         - "traefik.http.routers.${STACK_NAME}.tls.certresolver=${LETS_ENCRYPT_ENV}"
         # Redirect from EXTRA_DOMAINS to DOMAIN
         - "traefik.http.routers.${STACK_NAME}.middlewares=${STACK_NAME}-redirect"
-        - "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLForceHost=true"
-        - "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLHost=${DOMAIN}"
-        - "coop-cloud.${STACK_NAME}.version=0.7.0+3.11.2"
+        - "traefik.http.middlewares.${STACK_NAME}-redirect.redirectscheme.scheme=https"
+        - "traefik.http.middlewares.${STACK_NAME}-redirect.redirectscheme.permanent=true"
+        - "coop-cloud.${STACK_NAME}.version=1.0.0+4.0.2"
         - "coop-cloud.${STACK_NAME}.timeout=${TIMEOUT:-120}"
     healthcheck:
       test: "bash -c 'printf \"GET / HTTP/1.1\n\n\" > /dev/tcp/127.0.0.1/3000; exit $$?;'"

release/1.0.0+4.0.2

@@ -0,0 +1 @@
+BREAKING CHANGE: SSO requires OIDC_ISSUER_URL env.