From fea0d1042dcafca37246dabb90afa9720643b2c1 Mon Sep 17 00:00:00 2001 From: Phil Date: Fri, 30 Oct 2026 08:57:11 -0600 Subject: [PATCH] Move Manyfold login from Authentik to Pocket ID Manyfold matches linked users on provider + uid, so the existing user's auth_uid was remapped to the Pocket ID user before deploying. HTTPS_ONLY is needed so Manyfold builds an https callback URL behind Caddy. The Authentik credentials stay in the vault for rollback. Co-Authored-By: Claude Opus 5.5 --- roles/docker/templates/manyfold-compose.yml.j2 | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/roles/docker/templates/manyfold-compose.yml.j2 b/roles/docker/templates/manyfold-compose.yml.j2 index 74d0357..9ffef8f 100644 --- a/roles/docker/templates/manyfold-compose.yml.j2 +++ b/roles/docker/templates/manyfold-compose.yml.j2 @@ -14,16 +14,17 @@ services: environment: SECRET_KEY_BASE: {{ vault_manyfold.secret_key }} MULTIUSER: enabled - OIDC_CLIENT_ID: {{ vault_manyfold.oidc.client_id }} - OIDC_CLIENT_SECRET: {{ vault_manyfold.oidc.client_secret }} - OIDC_ISSUER: https://{{ subdomains.auth }}/application/o/manyfold/ - OIDC_NAME: Authentik + OIDC_CLIENT_ID: {{ vault_manyfold.pocketid.client_id }} + OIDC_CLIENT_SECRET: {{ vault_manyfold.pocketid.client_secret }} + OIDC_ISSUER: https://{{ subdomains.pocketid }} + OIDC_NAME: Pocket ID PUBLIC_HOSTNAME: {{ subdomains.models }} + HTTPS_ONLY: enabled # makes the OIDC callback URL https MAX_FILE_UPLOAD_SIZE: 5368709120 PUID: 1000 PGID: 1000 extra_hosts: - - "{{ subdomains.auth }}:{{ docker.hairpin_ip }}" + - "{{ subdomains.pocketid }}:{{ docker.hairpin_ip }}" labels: glance.name: Manyfold glance.icon: si:open3d