From a970da9436da71c6d333c584843c6d3a29bf5aca Mon Sep 17 00:00:00 2001
From: Alexander Rogov <i_am@rogov.al>
Date: Sun, 28 Jun 2026 18:28:09 +0300
Subject: [PATCH] configure oauth2 sso with mas, disable email registration

---
 manifests/hedgedoc/all.yaml | 13 +++++++++++--
 1 file changed, 11 insertions(+), 2 deletions(-)

diff --git a/manifests/hedgedoc/all.yaml b/manifests/hedgedoc/all.yaml
index 06d8645..93e3b18 100644
--- a/manifests/hedgedoc/all.yaml
+++ b/manifests/hedgedoc/all.yaml
@@ -18,9 +18,18 @@ data:
   CMD_PROTOCOL_USESSL: "true"
   CMD_URL_ADDPORT: "false"
   CMD_ALLOW_ORIGIN: '["hedgedoc.t0rt1k.tech"]'
-  CMD_EMAIL: "true"
-  CMD_ALLOW_EMAIL_REGISTER: "true"
+  CMD_EMAIL: "false"
+  CMD_ALLOW_EMAIL_REGISTER: "false"
   CMD_SESSION_SECRET: szMYcoyJoKavpbzwK6KvLyKYCBbT96FB4sA8ibDpDuo=
+  CMD_OAUTH2_CLIENT_ID: "01KW7DDGXPYA3BMZT87QZ8W1H9"
+  CMD_OAUTH2_CLIENT_SECRET: "mQ56gsIfvaCXrWdV2oCI"
+  CMD_OAUTH2_AUTHORIZATION_URL: "https://auth.t0rt1k.tech/authorize"
+  CMD_OAUTH2_TOKEN_URL: "https://auth.t0rt1k.tech/oauth2/token"
+  CMD_OAUTH2_USER_PROFILE_URL: "https://auth.t0rt1k.tech/oauth2/userinfo"
+  CMD_OAUTH2_SCOPE: "openid email"
+  CMD_OAUTH2_PROVIDERNAME: "t0rt1k Matrix"
+  CMD_OAUTH2_USER_PROFILE_ID_ATTR: "sub"
+  CMD_OAUTH2_USER_PROFILE_EMAIL_ATTR: "email"
 ---
 kind: PersistentVolumeClaim
 apiVersion: v1