diff --git a/.env.example b/.env.example index 515816c..eadda8b 100644 --- a/.env.example +++ b/.env.example @@ -313,16 +313,14 @@ IDP_DOMAIN= IDP_ISSUER_URL= # Url of the account edit page from your Identity Provider. IDP_ACCOUNT_URL= -# Global Client ID, you can overwrite it by defining a client specific client id -OC_OIDC_CLIENT_ID="{{ item.oc_oidc_client_id }}" +# Global Client ID: You can override this by specifying a custom client ID, or leave it blank to use the OC defaults, as described in the documentation +#OC_OIDC_CLIENT_ID= # Declares which property should be used for the oidc claim -PROXY_ROLE_ASSIGNMENT_OIDC_CLAIM="roles" -# claim_role to opencloud mapping -OC_OIDC_CLIENT_SCOPES="openid profile email roles offline_access" -# Unfortunetely needed at the moment (be careful to set it to none in prod) -# PROXY_OIDC_ACCESS_TOKEN_VERIFY_METHOD=none -# Allow OpenCloud, to show Authentik Login-Frame -PROXY_CSP_CONFIG_FILE_LOCATION="/etc/ocis/csp.yaml" +# Example: "roles" +PROXY_ROLE_ASSIGNMENT_OIDC_CLAIM= +# Defines the OIDC client scope +# Example: "openid profile email roles" +OC_OIDC_CLIENT_SCOPES= # Client specific environment vars #WEBFINGER_WEB_OIDC_CLIENT_ID= #WEBFINGER_WEB_OIDC_CLIENT_SCOPES=