diff --git a/authelia/config/configuration.yml b/authelia/config/configuration.yml index f0078af..3f362ad 100644 --- a/authelia/config/configuration.yml +++ b/authelia/config/configuration.yml @@ -76,4 +76,40 @@ notifier: sender: authelia@auth.jaredtsmith.com subject: "[Authelia] {title}" disable_require_tls: true # set to true if your domain uses no tls or ssl only - disable_html_emails: false # set to true if you don't want html in your emails \ No newline at end of file + disable_html_emails: false # set to true if you don't want html in your emails + +identity_providers: + oidc: + hmac_secret: + issuer_private_key: | + --- KEY START + --- KEY END + access_token_lifespan: 1h + authorize_code_lifespan: 1m + id_token_lifespan: 1h + refresh_token_lifespan: 90m + enable_client_debug_messages: false + clients: + - id: outline + description: Outline Wiki + secret: + public: false + authorization_policy: one_factor + audience: [] + scopes: + - openid + - groups + - email + - profile + redirect_uris: + - https://wiki.jaredtsmith.com/auth/oidc.callback + grant_types: + - refresh_token + - authorization_code + response_types: + - code + response_modes: + - form_post + - query + - fragment + userinfo_signing_algorithm: none diff --git a/outline/.env b/outline/.env index 6e64440..888e596 100644 --- a/outline/.env +++ b/outline/.env @@ -5,4 +5,6 @@ MINIO_BROWSER_REDIRECT_URL=https://wikidata-admin.jaredtsmith.com SECRET_KEY= UTILS_SECRET= WIKI_URL=https://wiki.jaredtsmith.com -WIKIDATA_URL=https://wikidata.jaredtsmith.com \ No newline at end of file +WIKIDATA_URL=https://wikidata.jaredtsmith.com +OIDC_SECRET= +AUTH_URL=https://auth.jaredtsmith.com \ No newline at end of file diff --git a/outline/docker-compose.yaml b/outline/docker-compose.yaml index 5b40346..a70b226 100644 --- a/outline/docker-compose.yaml +++ b/outline/docker-compose.yaml @@ -60,5 +60,12 @@ services: - SLACK_KEY=505633415890.2395437869377 - SLACK_SECRET=114f1ba04f85ac91de711ee42353e73e - FORCE_HTTPS=false + - OIDC_CLIENT_ID=outline + - OIDC_CLIENT_SECRET=${OIDC_SECRET} + - OIDC_AUTH_URI=${AUTH_URL}/api/oidc/authorize + - OIDC_TOKEN_URI=${AUTH_URL}/api/oidc/token + - OIDC_USERINFO_URI=${AUTH_URL}/api/oidc/userinfo + - OIDC_DISPLAY_NAME=Jared T Smith + - OIDC_SCOPES="openid profile email" ports: - 3000:3000