From 4a60a8bc95ba81aceeb462365f4a95f1a36bc95a Mon Sep 17 00:00:00 2001
From: Kevin Whitaker <eyecreate@eyecreate.org>
Date: Sat, 3 Jan 2026 12:17:57 -0500
Subject: [PATCH] try oidc

---
 CloudronManifest.json | 7 ++++++-
 start.sh              | 6 ++++++
 2 files changed, 12 insertions(+), 1 deletion(-)

diff --git a/CloudronManifest.json b/CloudronManifest.json
index c1eec74..21ab42a 100644
--- a/CloudronManifest.json
+++ b/CloudronManifest.json
@@ -5,7 +5,12 @@
   "httpPort": 3000,
   "addons": {
     "localstorage": {},
-    "postgresql": {}
+    "postgresql": {},
+    "oidc": {
+      "loginRedirectUri": "/api/oauth/openid",
+      "logoutRedirectUri": "/",
+      "tokenSignatureAlgorithm": "RS256"
+  }
   },
   "manifestVersion": 2
 }
diff --git a/start.sh b/start.sh
index f5b5414..811c12f 100755
--- a/start.sh
+++ b/start.sh
@@ -23,6 +23,12 @@ IGDB_CLIENT_ID=
 IGDB_CLIENT_SECRET=
 MOBYGAMES_API_KEY=
 STEAMGRIDDB_API_KEY=
+OIDC_ENABLED=true
+OIDC_PROVIDER=${CLOUDRON_OIDC_PROVIDER_NAME}
+OIDC_CLIENT_ID=${CLOUDRON_OIDC_CLIENT_ID}
+OIDC_CLIENT_SECRET=${CLOUDRON_OIDC_CLIENT_SECRET}
+OIDC_REDIRECT_URI="/api/oauth/openid"
+OIDC_SERVER_APPLICATION_URL=${CLOUDRON_OIDC_AUTH_ENDPOINT}
 EOL
 
 source /app/data/.env