From bde90cbb9f3754c6c7de7bdf5f7b0b29b3517d20 Mon Sep 17 00:00:00 2001
From: Johan Lundberg <lundberg@snakedesert.se>
Date: Sun, 19 Jul 2026 23:18:27 +0200
Subject: [PATCH] always require OIDC_OP_ISSUER and OIDC_OP_SESSION_SECRET to
 be set when using compose

---
 docker-compose.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/docker-compose.yml b/docker-compose.yml
index 4af9537..a66cd4b 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -6,8 +6,8 @@ services:
     ports:
       - "8000:8000"
     environment:
-      OIDC_OP_ISSUER: "http://localhost:8000"
-      OIDC_OP_SESSION_SECRET: "change-me-in-production"
+      OIDC_OP_ISSUER: "${OIDC_OP_ISSUER:?set OIDC_OP_ISSUER to the public HTTPS URL}"
+      OIDC_OP_SESSION_SECRET: "${OIDC_OP_SESSION_SECRET:?set OIDC_OP_SESSION_SECRET to a random secret}"
     volumes:
       - app-data:/app/data
     profiles: