Fix Authelia OIDC config to use expand-env filter with ${VAR} substitution

- Switch X_AUTHELIA_CONFIG_FILTERS from template to expand-env so ${VAR} syntax in config files is actually substituted - Add missing env var pass-throughs for OIDC HMAC secret and client secrets - Update git config client_secret fields to use ${VAR} syntax (matching host) - Update .env.example to document all required Portainer env vars
2026-02-26 19:57:55 +00:00
parent 6e62d9ba2f
commit 907d214b5c
3 changed files with 19 additions and 12 deletions
@@ -10,7 +10,11 @@ services:
      - AUTHELIA_JWT_SECRET=${AUTHELIA_JWT_SECRET}
      - AUTHELIA_SESSION_SECRET=${AUTHELIA_SESSION_SECRET}
      - AUTHELIA_STORAGE_ENCRYPTION_KEY=${AUTHELIA_STORAGE_ENCRYPTION_KEY}
-      - X_AUTHELIA_CONFIG_FILTERS=template
+      - AUTHELIA_IDENTITY_PROVIDERS_OIDC_HMAC_SECRET=${AUTHELIA_IDENTITY_PROVIDERS_OIDC_HMAC_SECRET}
+      - AUTHELIA_OIDC_CLIENT_SECRET_OPEN_WEBUI=${AUTHELIA_OIDC_CLIENT_SECRET_OPEN_WEBUI}
+      - AUTHELIA_OIDC_CLIENT_SECRET_LINKDING=${AUTHELIA_OIDC_CLIENT_SECRET_LINKDING}
+      # expand-env substitutes ${VAR} in config files; use template filter only if Go template syntax needed
+      - X_AUTHELIA_CONFIG_FILTERS=expand-env
    networks:
      - npm-network
      - authelia-internal