Login via Authentik

2026-02-22 19:42:42 +01:00
parent 09e2111295
commit 5c8bdcf5fa
2 changed files with 20 additions and 0 deletions
--- a/.env
+++ b/.env
@@ -2,5 +2,18 @@ OLLAMA_DATA_DIR=/datadisk/docker/ollama
 OLLAMA_PORT=11434
 OLLAMA_HOST=0.0.0.0:11434

+# -----------------------
+# Open WebUI
+# -----------------------
+WEBUI_URL=https://ai.ckvist.dk
+
+# Authentik OIDC
+OPENID_PROVIDER_URL=https://authentik.ckvist.dk/application/o/ai/.well-known/openid-configuration
+OAUTH_CLIENT_ID=ai-openwebui
+OAUTH_CLIENT_SECRET=MEGET_HEMMELIG
+
+OAUTH_SCOPES=openid email profile
+ENABLE_OAUTH_SIGNUP=false
+
 OPENWEBUI_PORT=3000
 OPENWEBUI_DATA_DIR=/datadisk/docker/open-webui
--- a/compose.yml
+++ b/compose.yml
@@ -21,6 +21,13 @@ services:
      - ollama
    environment:
      - OLLAMA_BASE_URL=http://ollama:11434
+
+      - WEBUI_URL=${WEBUI_URL}
+      - OPENID_PROVIDER_URL=${OPENID_PROVIDER_URL}
+      - OAUTH_CLIENT_ID=${OAUTH_CLIENT_ID}
+      - OAUTH_CLIENT_SECRET=${OAUTH_CLIENT_SECRET}
+      - OAUTH_SCOPES=${OAUTH_SCOPES}
+      - ENABLE_OAUTH_SIGNUP=${ENABLE_OAUTH_SIGNUP}
    ports:
      - "${OPENWEBUI_PORT:-3000}:8080"
    volumes: