diff --git a/.env b/.env
index 2dc5869..67ac104 100644
--- a/.env
+++ b/.env
@@ -2,5 +2,18 @@ OLLAMA_DATA_DIR=/datadisk/docker/ollama
 OLLAMA_PORT=11434
 OLLAMA_HOST=0.0.0.0:11434
 
+# -----------------------
+# Open WebUI
+# -----------------------
+WEBUI_URL=https://ai.ckvist.dk
+
+# Authentik OIDC
+OPENID_PROVIDER_URL=https://authentik.ckvist.dk/application/o/ai/.well-known/openid-configuration
+OAUTH_CLIENT_ID=ai-openwebui
+OAUTH_CLIENT_SECRET=MEGET_HEMMELIG
+
+OAUTH_SCOPES=openid email profile
+ENABLE_OAUTH_SIGNUP=false
+
 OPENWEBUI_PORT=3000
 OPENWEBUI_DATA_DIR=/datadisk/docker/open-webui
diff --git a/compose.yml b/compose.yml
index df2a7dc..2f90b90 100644
--- a/compose.yml
+++ b/compose.yml
@@ -21,6 +21,13 @@ services:
       - ollama
     environment:
       - OLLAMA_BASE_URL=http://ollama:11434
+
+      - WEBUI_URL=${WEBUI_URL}
+      - OPENID_PROVIDER_URL=${OPENID_PROVIDER_URL}
+      - OAUTH_CLIENT_ID=${OAUTH_CLIENT_ID}
+      - OAUTH_CLIENT_SECRET=${OAUTH_CLIENT_SECRET}
+      - OAUTH_SCOPES=${OAUTH_SCOPES}
+      - ENABLE_OAUTH_SIGNUP=${ENABLE_OAUTH_SIGNUP}
     ports:
       - "${OPENWEBUI_PORT:-3000}:8080"
     volumes: