bar

.env.sample

@@ -16,7 +16,6 @@ OAUTH2_SERVER_URL=https://sso.example.com
 OAUTH2_AUTH_ENDPOINT=/application/o/authorize/
 OAUTH2_USERINFO_ENDPOINT=/application/o/userinfo/
 OAUTH2_TOKEN_ENDPOINT=/application/o/token/
-# should be set in secret OAUTH2_SECRET=
 OAUTH2_REQUEST_PERMISSIONS="openid profile email wekan"
 OAUTH2_ID_MAP=preferred_username
 OAUTH2_USERNAME_MAP=preferred_username

compose.yml

@@ -30,7 +30,7 @@ services:
       - OAUTH2_ENABLED
       - OAUTH2_LOGIN_STYLE
       - OAUTH2_CLIENT_ID
-      - OAUTH2_SECRET
+      - OAUTH2_SECRET_FILE=/run/secrets/oauth2_secret
       - OAUTH2_SERVER_URL
       - OAUTH2_AUTH_ENDPOINT
       - OAUTH2_USERINFO_ENDPOINT
@@ -45,7 +45,6 @@ services:
       - MAIL_FROM
       - WITH_API
       - RICHER_CARD_COMMENT_EDITOR
-
     networks:
       - internal 
       - proxy