phil/ansible
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Move Manyfold login from Authentik to Pocket ID

Browse Source 
Manyfold matches linked users on provider + uid, so the existing user's
auth_uid was remapped to the Pocket ID user before deploying.
HTTPS_ONLY is needed so Manyfold builds an https callback URL behind
Caddy. The Authentik credentials stay in the vault for rollback.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
Phil
2026-10-30 08:57:11 -06:00
co-authored by Claude Opus 5.5
parent ef3a850996
commit fea0d1042d
1 changed files with 6 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
roles/docker/templates/manyfold-compose.yml.j2
+6 -5
View File
@@ -14,16 +14,17 @@ services:
environment:
SECRET_KEY_BASE: {{ vault_manyfold.secret_key }}
MULTIUSER: enabled
OIDC_CLIENT_ID: {{ vault_manyfold.oidc.client_id }}
OIDC_CLIENT_SECRET: {{ vault_manyfold.oidc.client_secret }}
OIDC_ISSUER: https://{{ subdomains.auth }}/application/o/manyfold/
OIDC_NAME: Authentik
OIDC_CLIENT_ID: {{ vault_manyfold.pocketid.client_id }}
OIDC_CLIENT_SECRET: {{ vault_manyfold.pocketid.client_secret }}
OIDC_ISSUER: https://{{ subdomains.pocketid }}
OIDC_NAME: Pocket ID
PUBLIC_HOSTNAME: {{ subdomains.models }}
HTTPS_ONLY: enabled # makes the OIDC callback URL https
MAX_FILE_UPLOAD_SIZE: 5368709120
PUID: 1000
PGID: 1000
extra_hosts:
- "{{ subdomains.auth }}:{{ docker.hairpin_ip }}"
- "{{ subdomains.pocketid }}:{{ docker.hairpin_ip }}"
labels:
glance.name: Manyfold
glance.icon: si:open3d