updated outline for authelaia

authelia/config/configuration.yml

@@ -76,4 +76,40 @@ notifier:
    sender: authelia@auth.jaredtsmith.com
    subject: "[Authelia] {title}"
    disable_require_tls: true # set to true if your domain uses no tls or ssl only
-   disable_html_emails: false # set to true if you don't want html in your emails
+   disable_html_emails: false # set to true if you don't want html in your emails
+
+identity_providers:
+  oidc:
+    hmac_secret: 
+    issuer_private_key: |
+      --- KEY START
+      --- KEY END
+    access_token_lifespan: 1h
+    authorize_code_lifespan: 1m
+    id_token_lifespan: 1h
+    refresh_token_lifespan: 90m
+    enable_client_debug_messages: false
+    clients:
+      - id: outline
+        description: Outline Wiki
+        secret: 
+        public: false
+        authorization_policy: one_factor
+        audience: []
+        scopes:
+          - openid
+          - groups
+          - email
+          - profile
+        redirect_uris:
+          - https://wiki.jaredtsmith.com/auth/oidc.callback
+        grant_types:
+          - refresh_token
+          - authorization_code
+        response_types:
+          - code
+        response_modes:
+          - form_post
+          - query
+          - fragment
+        userinfo_signing_algorithm: none

outline/.env

@@ -5,4 +5,6 @@ MINIO_BROWSER_REDIRECT_URL=https://wikidata-admin.jaredtsmith.com
 SECRET_KEY=
 UTILS_SECRET=
 WIKI_URL=https://wiki.jaredtsmith.com
-WIKIDATA_URL=https://wikidata.jaredtsmith.com
+WIKIDATA_URL=https://wikidata.jaredtsmith.com
+OIDC_SECRET=
+AUTH_URL=https://auth.jaredtsmith.com

outline/docker-compose.yaml

@@ -60,5 +60,12 @@ services:
       - SLACK_KEY=505633415890.2395437869377
       - SLACK_SECRET=114f1ba04f85ac91de711ee42353e73e
       - FORCE_HTTPS=false
+      - OIDC_CLIENT_ID=outline
+      - OIDC_CLIENT_SECRET=${OIDC_SECRET}
+      - OIDC_AUTH_URI=${AUTH_URL}/api/oidc/authorize
+      - OIDC_TOKEN_URI=${AUTH_URL}/api/oidc/token
+      - OIDC_USERINFO_URI=${AUTH_URL}/api/oidc/userinfo
+      - OIDC_DISPLAY_NAME=Jared T Smith
+      - OIDC_SCOPES="openid profile email"
     ports:
       - 3000:3000