add hedgedoc integration

combine.yml

@@ -66,6 +66,15 @@ authentik:
             - rallly.png
         secrets:
             rallly_id: rallly
+    hedgedoc:
+        uncomment:  
+            - compose.hedgedoc.yml
+            - HEDGEDOC_DOMAIN
+            - SECRET_HEDGEDOC_ID_VERSION
+            - SECRET_HEDGEDOC_SECRET_VERSION
+            - hedgedoc.png
+        secrets:
+            hedgedoc_id: hedgedoc
 nextcloud:
     authentik:
         uncomment:
@@ -139,9 +148,8 @@ vikunja:
             - OAUTH_ENABLED
             - SECRET_OAUTH_SECRET_VERSION
         shared_secrets:
-            vikunja_secret: oauth_secret
             #vikunja_id: oauth_id
-
+            vikunja_secret: oauth_secret
 matrix-synapse:
     authentik:
         env:
@@ -191,3 +199,20 @@ wekan:
             - OIDC_REDIRECTION_ENABLED
         shared_secrets:
             wekan_secret: oauth2_secret
+hedgedoc:
+    authentik:
+        env:
+            CMD_OAUTH2_USER_PROFILE_URL: https://authentik.example.com/application/o/userinfo/
+            CMD_OAUTH2_USER_PROFILE_USERNAME_ATTR: preferred_username
+            CMD_OAUTH2_USER_PROFILE_DISPLAY_NAME_ATTR: name
+            CMD_OAUTH2_USER_PROFILE_EMAIL_ATTR: email
+            CMD_OAUTH2_TOKEN_URL: https://authentik.example.com/application/o/token/
+            CMD_OAUTH2_AUTHORIZATION_URL: https://authentik.example.com/application/o/authorize/
+            # TODO: set CLIENT_ID as secret
+            CMD_OAUTH2_CLIENT_ID: hedgedoc
+            CMD_OAUTH2_PROVIDERNAME: Authentik
+        uncomment: 
+            - compose.oauth.yml
+            - SECRET_OAUTH_KEY_VERSION
+        shared_secrets:
+            hedgedoc_secret: oauth_key