From e30fa430ba95e0afc41e6496a4fc5f6388bcac2a Mon Sep 17 00:00:00 2001
From: Oscar Grey <oscarg@coolbea.nz>
Date: Thu, 8 Oct 2026 22:22:41 +1300
Subject: [PATCH] Adding SSO by default for VW

---
 .env.example       | 4 ++++
 docker-compose.yml | 6 ++++++
 2 files changed, 10 insertions(+)

diff --git a/.env.example b/.env.example
index 70a04b1..a335b5c 100644
--- a/.env.example
+++ b/.env.example
@@ -14,3 +14,7 @@ OAUTH_SECRET=
 # Testing Stuff
 # Leave CADDY_TLS blank to automatically obtain a certificate.
 CADDY_TLS=
+
+
+# Vaultwarden SSO Stuff
+VW_CLIENT_SECRET=
diff --git a/docker-compose.yml b/docker-compose.yml
index 884b388..0c16706 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -58,6 +58,12 @@ services:
         restart: unless-stopped
         environment:
             - DOMAIN=https://${PWD_SUBDOMAIN}.${DOMAIN_NAME}
+            - SSO_ENABLED=true
+            - SSO_ONLY=true
+            - SSO_AUTHORITY=https://${MAIL_SUBDOMAIN}.${DOMAIN_NAME}
+            - SSO_CLIENT_ID=vaultwarden
+            - SSO_CLIENT_SECRET=${VW_CLIENT_SECRET}
+            - SSO_SCOPES="profile email offline_access"
         volumes:
             - vw-data:/data/
         networks: