Skip to content

docs: OIDC_TLS_CACERTFILE accepts DER, PKCS#7 and directories #159

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We鈥檒l occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
gantoine merged 1 commit into from
Sep 29, 2026
Merged

docs: OIDC_TLS_CACERTFILE accepts DER, PKCS#7 and directories #159

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
38 changes: 19 additions & 19 deletions docs/resources/snippets/env-vars.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -55,25 +55,25 @@

### OpenID Connect

| Variable | Default | Required | Description |
| ----------------------------- | -------------------- | :------: | ------------------------------------------------------------------ |
| `OIDC_ENABLED` | `false` | | Enable OpenID Connect authentication |
| `OIDC_AUTOLOGIN` | `false` | | Skip the OIDC button on the login page and auto-redirect |
| `OIDC_ALLOW_REGISTRATION` | `true` | | Allow new accounts to be created automatically on first OIDC login |
| `OIDC_PROVIDER` | | | Name of the OIDC provider in use |
| `OIDC_CLIENT_ID` | | | Client ID for OIDC authentication |
| `OIDC_CLIENT_SECRET` | | | Client secret for OIDC authentication |
| `OIDC_REDIRECT_URI` | | | Absolute redirect URI for OIDC authentication |
| `OIDC_SERVER_APPLICATION_URL` | | | Absolute URL of the OIDC server application |
| `OIDC_SERVER_METADATA_URL` | | | URL to the OIDC provider metadata endpoint |
| `OIDC_CLAIM_ROLES` | | | OIDC claim containing user roles |
| `OIDC_ROLE_VIEWER` | | | Role value mapping to viewer permissions |
| `OIDC_ROLE_EDITOR` | | | Role value mapping to editor permissions |
| `OIDC_ROLE_ADMIN` | | | Role value mapping to admin permissions |
| `OIDC_TLS_CACERTFILE` | | | Path to file containing trusted CA certificates |
| `OIDC_USERNAME_ATTRIBUTE` | `preferred_username` | | Attribute on OIDC user info used as the username |
| `OIDC_RP_INITIATED_LOGOUT` | `false` | | Enable RP-initiated logout flow |
| `OIDC_END_SESSION_ENDPOINT` | | | OIDC end-session endpoint override URL |
| Variable | Default | Required | Description |
| ----------------------------- | -------------------- | :------: | ---------------------------------------------------------------------------------- |
| `OIDC_ENABLED` | `false` | | Enable OpenID Connect authentication |
| `OIDC_AUTOLOGIN` | `false` | | Skip the OIDC button on the login page and auto-redirect |
| `OIDC_ALLOW_REGISTRATION` | `true` | | Allow new accounts to be created automatically on first OIDC login |
| `OIDC_PROVIDER` | | | Name of the OIDC provider in use |
| `OIDC_CLIENT_ID` | | | Client ID for OIDC authentication |
| `OIDC_CLIENT_SECRET` | | | Client secret for OIDC authentication |
| `OIDC_REDIRECT_URI` | | | Absolute redirect URI for OIDC authentication |
| `OIDC_SERVER_APPLICATION_URL` | | | Absolute URL of the OIDC server application |
| `OIDC_SERVER_METADATA_URL` | | | URL to the OIDC provider metadata endpoint |
| `OIDC_CLAIM_ROLES` | | | OIDC claim containing user roles |
| `OIDC_ROLE_VIEWER` | | | Role value mapping to viewer permissions |
| `OIDC_ROLE_EDITOR` | | | Role value mapping to editor permissions |
| `OIDC_ROLE_ADMIN` | | | Role value mapping to admin permissions |
| `OIDC_TLS_CACERTFILE` | | | CA bundle file (PEM, DER or `.p7b`) or directory, trusted alongside the system CAs |
| `OIDC_USERNAME_ATTRIBUTE` | `preferred_username` | | Attribute on OIDC user info used as the username |
| `OIDC_RP_INITIATED_LOGOUT` | `false` | | Enable RP-initiated logout flow |
| `OIDC_END_SESSION_ENDPOINT` | | | OIDC end-session endpoint override URL |

### Metadata Providers

Expand Down