diff --git a/.env.example b/.env.example index 70a04b1..a335b5c 100644 --- a/.env.example +++ b/.env.example @@ -14,3 +14,7 @@ OAUTH_SECRET= # Testing Stuff # Leave CADDY_TLS blank to automatically obtain a certificate. CADDY_TLS= + + +# Vaultwarden SSO Stuff +VW_CLIENT_SECRET= diff --git a/docker-compose.yml b/docker-compose.yml index 884b388..0c16706 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -58,6 +58,12 @@ services: restart: unless-stopped environment: - DOMAIN=https://${PWD_SUBDOMAIN}.${DOMAIN_NAME} + - SSO_ENABLED=true + - SSO_ONLY=true + - SSO_AUTHORITY=https://${MAIL_SUBDOMAIN}.${DOMAIN_NAME} + - SSO_CLIENT_ID=vaultwarden + - SSO_CLIENT_SECRET=${VW_CLIENT_SECRET} + - SSO_SCOPES="profile email offline_access" volumes: - vw-data:/data/ networks: