phil/ansible
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

add oidc auth to paperless

Browse Source
This commit is contained in:
Phil 2024-12-09 18:33:59 -07:00
parent 883e907a2f
commit 9388bb5037
2 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
roles/docker/templates/paperlessngx-compose.yml.j2
View File

@ -18,6 +18,8 @@ services:
- ./export:/usr/src/paperless/export - ./export:/usr/src/paperless/export
- ./consume:/usr/src/paperless/consume - ./consume:/usr/src/paperless/consume
env_file: docker-compose.env env_file: docker-compose.env
extra_hosts:
- 'auth.thesatelliteoflove.com:172.20.0.5'
environment: environment:
PAPERLESS_REDIS: redis://broker:6379 PAPERLESS_REDIS: redis://broker:6379
PAPERLESS_TIKA_ENABLED: 1 PAPERLESS_TIKA_ENABLED: 1

4
roles/docker/templates/paperlessngx.env.j2
View File

@ -40,3 +40,7 @@ PAPERLESS_TIME_ZONE=America/Denver
# Set if accessing paperless via a domain subpath e.g. https://domain.com/PATHPREFIX and using a reverse-proxy like traefik or nginx # Set if accessing paperless via a domain subpath e.g. https://domain.com/PATHPREFIX and using a reverse-proxy like traefik or nginx
#PAPERLESS_FORCE_SCRIPT_NAME=/PATHPREFIX #PAPERLESS_FORCE_SCRIPT_NAME=/PATHPREFIX
#PAPERLESS_STATIC_URL=/PATHPREFIX/static/ # trailing slash required #PAPERLESS_STATIC_URL=/PATHPREFIX/static/ # trailing slash required
# authentik
PAPERLESS_APPS: "allauth.socialaccount.providers.openid_connect"
PAPERLESS_SOCIALACCOUNT_PROVIDERS: '{"openid_connect": {"APPS": [{"provider_id": "authentik","name": "Authentik SSO","client_id": "{{ paperless_oauth_client_id }}","secret": "{{ paperless_oauth_client_secret }}","settings": { "server_url": "https://auth.thesatelliteoflove.com/application/o/paperlessngx/.well-known/openid-configuration"}}]}}'