From ef3a8509965ed0341b4236fcee9105f61bc894ce Mon Sep 17 00:00:00 2001 From: Phil Date: Fri, 30 Oct 2026 08:39:46 -0600 Subject: [PATCH] Move ByteStash login from Authentik to Pocket ID ByteStash matches users on issuer + sub only, so the existing user row was remapped to the Pocket ID user before this was deployed. The old Authentik credentials stay in the vault for rollback. Co-Authored-By: Claude Opus 5.5 --- roles/docker/templates/bytestash-compose.yml.j2 | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/roles/docker/templates/bytestash-compose.yml.j2 b/roles/docker/templates/bytestash-compose.yml.j2 index b5a4189..100df54 100644 --- a/roles/docker/templates/bytestash-compose.yml.j2 +++ b/roles/docker/templates/bytestash-compose.yml.j2 @@ -13,13 +13,13 @@ services: DISABLE_ACCOUNTS: "false" DISABLE_INTERNAL_ACCOUNTS: "false" OIDC_ENABLED: "true" - OIDC_DISPLAY_NAME: "Login with Authentik" - OIDC_ISSUER_URL: "https://{{ subdomains.auth }}/application/o/bytestash/" - OIDC_CLIENT_ID: "{{ vault_bytestash.oidc_client_id }}" - OIDC_CLIENT_SECRET: "{{ vault_bytestash.oidc_client_secret }}" + OIDC_DISPLAY_NAME: "Login with Pocket ID" + OIDC_ISSUER_URL: "https://{{ subdomains.pocketid }}" + OIDC_CLIENT_ID: "{{ vault_bytestash.pocketid_client_id }}" + OIDC_CLIENT_SECRET: "{{ vault_bytestash.pocketid_client_secret }}" OIDC_SCOPES: "openid profile email" extra_hosts: - - "{{ subdomains.auth }}:{{ docker.hairpin_ip }}" + - "{{ subdomains.pocketid }}:{{ docker.hairpin_ip }}" labels: glance.name: ByteStash glance.icon: si:code