Fix Authelia OIDC client secret syntax to use template filter

expand-env double-processes substituted values so $ in bcrypt hashes get re-expanded. Switch back to template filter with {{ env "VAR" }} syntax which returns values as-is.
2026-02-26 20:00:44 +00:00
parent 907d214b5c
commit 39f6ca8530
2 changed files with 3 additions and 4 deletions
@@ -13,8 +13,7 @@ services:
      - AUTHELIA_IDENTITY_PROVIDERS_OIDC_HMAC_SECRET=${AUTHELIA_IDENTITY_PROVIDERS_OIDC_HMAC_SECRET}
      - AUTHELIA_OIDC_CLIENT_SECRET_OPEN_WEBUI=${AUTHELIA_OIDC_CLIENT_SECRET_OPEN_WEBUI}
      - AUTHELIA_OIDC_CLIENT_SECRET_LINKDING=${AUTHELIA_OIDC_CLIENT_SECRET_LINKDING}
-      # expand-env substitutes ${VAR} in config files; use template filter only if Go template syntax needed
-      - X_AUTHELIA_CONFIG_FILTERS=expand-env
+      - X_AUTHELIA_CONFIG_FILTERS=template
    networks:
      - npm-network
      - authelia-internal