Files
snow/apps/immich/oidc.yaml
2025-08-30 01:08:22 +02:00

33 lines
918 B
YAML

apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: immich-oidc
spec:
refreshInterval: 24h
secretStoreRef:
name: bitwarden
kind: ClusterSecretStore
target:
template:
engineVersion: v2
data:
"config.yaml": |-
oauth:
enabled: true
buttonText: Login with OAuth
clientId: "{{ .clientId }}"
clientSecret: "{{ .clientSecret }}"
defaultStorageQuota: 0
issuerUrl: https://authentik.sdg.moe/application/o/immich/.well-known/openid-configuration
scope: openid email profile
signingAlgorithm: RS256
profileSigningAlgorithm: none
storageLabelClaim: preferred_username
storageQuotaClaim: immich_quota
autoLaunch: true
passwordLogin:
enabled: false
dataFrom:
- extract:
key: immich-sso