Fix Authelia OIDC client secrets using template secret files

- Switch from unsupported \${VAR} substitution to {{ secret "..." }} template syntax - Enable X_AUTHELIA_CONFIG_FILTERS=template in compose - Client secrets now loaded from /config/secrets/oidc_* files on host - Use PBKDF2-SHA512 hashes (not bcrypt, not plaintext)
2026-02-26 02:04:52 +00:00
parent 0ce030275b
commit 5e91f0c68b
3 changed files with 10 additions and 5 deletions
@@ -10,6 +10,7 @@ services:
      - AUTHELIA_JWT_SECRET=${AUTHELIA_JWT_SECRET}
      - AUTHELIA_SESSION_SECRET=${AUTHELIA_SESSION_SECRET}
      - AUTHELIA_STORAGE_ENCRYPTION_KEY=${AUTHELIA_STORAGE_ENCRYPTION_KEY}
+      - X_AUTHELIA_CONFIG_FILTERS=template
    networks:
      - npm-network
      - authelia-internal