28 lines
845 B
YAML
28 lines
845 B
YAML
---
|
|
version: "3.8"
|
|
|
|
# Generic OAuth 2.0 / OIDC provider, for SSO with Keycloak, Authentik and friends.
|
|
|
|
services:
|
|
app:
|
|
environment:
|
|
- ENABLE_OAUTH_AUTH
|
|
- OAUTH_CLIENT_ID
|
|
# Base URL of your identity provider, e.g. https://keycloak.example.com
|
|
- OAUTH_PROVIDER_URL
|
|
# The three endpoints below must be HTTPS.
|
|
- OAUTH_AUTHORIZE_URL
|
|
- OAUTH_TOKEN_URL
|
|
- OAUTH_USERINFO_URL
|
|
# Space-separated. Defaults to "openid email profile".
|
|
- OAUTH_SCOPE
|
|
# Accept "id" or "user_id" as the subject claim when the IdP omits "sub". Only for non-OIDC providers that do not return one.
|
|
- OAUTH_ALLOW_ID_FALLBACK
|
|
secrets:
|
|
- oauth_client_secret
|
|
|
|
secrets:
|
|
oauth_client_secret:
|
|
external: true
|
|
name: ${STACK_NAME}_oauth_client_secret_${SECRET_OAUTH_CLIENT_SECRET_VERSION:-v1}
|