Update comments for env vars related to SSO

This commit is contained in:
Bubka 2023-12-09 17:35:34 +01:00
parent b9f4d94b8a
commit 9d5d2705e4
3 changed files with 19 additions and 7 deletions

View File

@ -224,7 +224,7 @@ WEBAUTHN_USER_VERIFICATION=preferred
#### SSO settings (for Socialite) #### #### SSO settings (for Socialite) ####
# Uncomment lines for the OAuth providers you need. # Uncomment and complete lines for the OAuth providers you want to enable.
# OPENID_AUTHORIZE_URL= # OPENID_AUTHORIZE_URL=
# OPENID_TOKEN_URL= # OPENID_TOKEN_URL=

9
Dockerfile vendored
View File

@ -209,6 +209,15 @@ ENV \
# 'preferred' (default) : Will ask for user verification IF POSSIBLE # 'preferred' (default) : Will ask for user verification IF POSSIBLE
# 'discouraged' : Will NOT ask for user verification (for example, to minimize disruption to the user interaction flow) # 'discouraged' : Will NOT ask for user verification (for example, to minimize disruption to the user interaction flow)
WEBAUTHN_USER_VERIFICATION=preferred \ WEBAUTHN_USER_VERIFICATION=preferred \
#### SSO settings (for Socialite) ####
# Uncomment and complete lines for the OAuth providers you want to enable.
# OPENID_AUTHORIZE_URL= \
# OPENID_TOKEN_URL= \
# OPENID_USERINFO_URL= \
# OPENID_CLIENT_ID= \
# OPENID_CLIENT_SECRET= \
# GITHUB_CLIENT_ID= \
# GITHUB_CLIENT_SECRET= \
# Use this setting to declare trusted proxied. # Use this setting to declare trusted proxied.
# Supported: # Supported:
# '*': to trust any proxy # '*': to trust any proxy

View File

@ -78,12 +78,6 @@ services:
# authentication checks. That means your proxy is fully responsible of the authentication process, 2FAuth will # authentication checks. That means your proxy is fully responsible of the authentication process, 2FAuth will
# trust him as long as headers are presents. # trust him as long as headers are presents.
- AUTHENTICATION_GUARD=web-guard - AUTHENTICATION_GUARD=web-guard
# OpenId settings
# - OPENID_AUTHORIZE_URL=
# - OPENID_TOKEN_URL=
# - OPENID_USERINFO_URL=
# - OPENID_CLIENT_ID=
# - OPENID_CLIENT_SECRET=
# Name of the HTTP headers sent by the reverse proxy that identifies the authenticated user at proxy level. # Name of the HTTP headers sent by the reverse proxy that identifies the authenticated user at proxy level.
# Check your proxy documentation to find out how these headers are named (i.e 'REMOTE_USER', 'REMOTE_EMAIL', etc...) # Check your proxy documentation to find out how these headers are named (i.e 'REMOTE_USER', 'REMOTE_EMAIL', etc...)
# (only relevant when AUTHENTICATION_GUARD is set to 'reverse-proxy-guard') # (only relevant when AUTHENTICATION_GUARD is set to 'reverse-proxy-guard')
@ -113,6 +107,15 @@ services:
# 'preferred' (default) : Will ask for user verification IF POSSIBLE # 'preferred' (default) : Will ask for user verification IF POSSIBLE
# 'discouraged' : Will NOT ask for user verification (for example, to minimize disruption to the user interaction flow) # 'discouraged' : Will NOT ask for user verification (for example, to minimize disruption to the user interaction flow)
- WEBAUTHN_USER_VERIFICATION=preferred - WEBAUTHN_USER_VERIFICATION=preferred
#### SSO settings (for Socialite) ####
# Uncomment and complete lines for the OAuth providers you want to enable.
# - OPENID_AUTHORIZE_URL=
# - OPENID_TOKEN_URL=
# - OPENID_USERINFO_URL=
# - OPENID_CLIENT_ID=
# - OPENID_CLIENT_SECRET=
# - GITHUB_CLIENT_ID=
# - GITHUB_CLIENT_SECRET=
# Use this setting to declare trusted proxied. # Use this setting to declare trusted proxied.
# Supported: # Supported:
# '*': to trust any proxy # '*': to trust any proxy