issuer

bookstack/env.production

@@ -6,8 +6,3 @@ OIDC_DISPLAY_NAME_CLAIMS=name
 OIDC_CLIENT_ID=bookstack
 
 OIDC_ISSUER_DISCOVER=true
-
-## NOTE: Use following if DISCOVER fails
-#OIDC_PUBLIC_KEY=file:///keys/idp-public-key.pem
-#OIDC_AUTH_ENDPOINT=https://${KEYCLOAK_HOSTNAME}/realms/${REALM}/protocol/openid-connect/auth
-#OIDC_TOKEN_ENDPOINT=https://${KEYCLOAK_HOSTNAME}/realms/${REALM}/protocol/openid-connect/token

bookstack/setup

@@ -26,9 +26,12 @@ cat <<EOF > "$SECRETS"
 # DO NOT CHECK IN
 APP_URL=https://${BOOKSTACK_HOSTNAME}
 MYSQL_ROOT_PASSWORD=${MYSQL_ROOT_PASSWORD}
-OIDC_ISSUER=https://${KEYCLOAK_HOSTNAME}/realms/${REALM}
 
+OIDC_ISSUER=https://${KEYCLOAK_HOSTNAME}/realms/${REALM}
 OIDC_CLIENT_SECRET=${CLIENT_SECRET}
+
+#OIDC_AUTH_ENDPOINT=https://${KEYCLOAK_HOSTNAME}/realms/${REALM}/protocol/openid-connect/auth
+#OIDC_TOKEN_ENDPOINT=https://${KEYCLOAK_HOSTNAME}/realms/${REALM}/protocol/openid-connect/token
 EOF
 
 ../keycloak/client-delete bookstack