phil/ansible
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Move ByteStash login from Authentik to Pocket ID

Browse Source 
ByteStash matches users on issuer + sub only, so the existing user row
was remapped to the Pocket ID user before this was deployed. The old
Authentik credentials stay in the vault for rollback.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
Phil
2026-10-30 08:39:46 -06:00
co-authored by Claude Opus 5.5
parent b363587acf
commit ef3a850996
1 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
roles/docker/templates/bytestash-compose.yml.j2
+5 -5
View File
@@ -13,13 +13,13 @@ services:
DISABLE_ACCOUNTS: "false"
DISABLE_INTERNAL_ACCOUNTS: "false"
OIDC_ENABLED: "true"
OIDC_DISPLAY_NAME: "Login with Authentik"
OIDC_ISSUER_URL: "https://{{ subdomains.auth }}/application/o/bytestash/"
OIDC_CLIENT_ID: "{{ vault_bytestash.oidc_client_id }}"
OIDC_CLIENT_SECRET: "{{ vault_bytestash.oidc_client_secret }}"
OIDC_DISPLAY_NAME: "Login with Pocket ID"
OIDC_ISSUER_URL: "https://{{ subdomains.pocketid }}"
OIDC_CLIENT_ID: "{{ vault_bytestash.pocketid_client_id }}"
OIDC_CLIENT_SECRET: "{{ vault_bytestash.pocketid_client_secret }}"
OIDC_SCOPES: "openid profile email"
extra_hosts:
- "{{ subdomains.auth }}:{{ docker.hairpin_ip }}"
- "{{ subdomains.pocketid }}:{{ docker.hairpin_ip }}"
labels:
glance.name: ByteStash
glance.icon: si:code