From 85ffb4e1b2ce34a69d2b103877045f91dbd3d101 Mon Sep 17 00:00:00 2001
From: Alpha Chen <alpha@kejadlen.dev>
Date: Sat, 16 Sep 2023 08:24:01 -0700
Subject: [PATCH] =?UTF-8?q?miniflux=20=F0=9F=A4=9D=20authelia?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 lotus-land-story/miniflux.yml                         |  8 +++++++-
 lotus-land-story/templates/authelia_configuration.yml | 11 +++++++++++
 2 files changed, 18 insertions(+), 1 deletion(-)

diff --git a/lotus-land-story/miniflux.yml b/lotus-land-story/miniflux.yml
index f173413..19fb89f 100644
--- a/lotus-land-story/miniflux.yml
+++ b/lotus-land-story/miniflux.yml
@@ -55,7 +55,7 @@
       community.docker.docker_container:
         restart: true
         name: miniflux
-        image: miniflux/miniflux:2.0.47
+        image: miniflux/miniflux:2.0.48
         env:
           DATABASE_URL: postgres://miniflux:{{ miniflux.db_password }}@host.docker.internal/miniflux
           RUN_MIGRATIONS: "1"
@@ -65,6 +65,12 @@
           BASE_URL: https://rss.{{ domain }}
           METRICS_COLLECTOR: "1"
           METRICS_ALLOWED_NETWORKS: "{{ docker_network.network.IPAM.Config[0].Subnet }}"
+          OAUTH2_PROVIDER: oidc
+          OAUTH2_CLIENT_ID: miniflux
+          OAUTH2_CLIENT_SECRET: "{{ miniflux.oidc_secret }}"
+          OAUTH2_REDIRECT_URL: https://rss.{{ domain }}/oauth2/oidc/callback
+          OAUTH2_OIDC_DISCOVERY_ENDPOINT: https://auth.{{ domain }}
+          OAUTH2_USER_CREATION: "1"
         restart_policy: unless-stopped
         networks:
           - name: lotus_land_story
diff --git a/lotus-land-story/templates/authelia_configuration.yml b/lotus-land-story/templates/authelia_configuration.yml
index 378da68..469ec51 100644
--- a/lotus-land-story/templates/authelia_configuration.yml
+++ b/lotus-land-story/templates/authelia_configuration.yml
@@ -76,3 +76,14 @@ identity_providers:
         - email
         - profile
       userinfo_signing_algorithm: none
+    - id: miniflux
+      description: Miniflux
+      secret: $argon2id$v=19$m=65536,t=3,p=4$tK5aBDAHOmNsEZzSYS88eg$z6tkZVIzB0x6RQjCM0v34lguS454lcQd/Sm0+xRfg7w
+      public: false
+      redirect_uris:
+        - https://rss.{{ domain }}/oauth2/oidc/callback
+      scopes:
+        - openid
+        - email
+        - profile
+      userinfo_signing_algorithm: none