paperless secret update + iam

paperless/main.yaml

@@ -134,18 +134,26 @@ spec:
       - env:
         - name: COMPOSE_PROJECT_NAME
           value: paperless
+        - name: PAPERLESS_APPS
+          value: allauth.socialaccount.providers.openid_connect
         - name: PAPERLESS_DBHOST
           value: paperless-postgresql
         - name: PAPERLESS_DBPASS
           valueFrom:
             secretKeyRef:
               key: db-pass
-              name: pg
+              name: paperless
         - name: PAPERLESS_DBUSER
           valueFrom:
             secretKeyRef:
               key: db-user
-              name: pg
+              name: paperless
+        - name: PAPERLESS_ENABLE_HTTP_REMOTE_USER
+          value: "true"
+        - name: PAPERLESS_HTTP_REMOTE_USER_HEADER_NAME
+          value: HTTP_X_FORWARDED_USER
+        - name: PAPERLESS_LOGOUT_REDIRECT_URL
+          value: https://iam.borninpain.de/realms/home/protocol/openid-connect/logout
         - name: PAPERLESS_OCR_LANGUAGE
           value: deu
         - name: PAPERLESS_OCR_LANGUAGES
@@ -156,7 +164,12 @@ spec:
           valueFrom:
             secretKeyRef:
               key: redis-url
-              name: redis
+              name: paperless
+        - name: PAPERLESS_SOCIALACCOUNT_PROVIDERS
+          valueFrom:
+            secretKeyRef:
+              key: provider
+              name: paperless
         - name: PAPERLESS_TIME_ZONE
           value: Europe/Berlin
         - name: PAPERLESS_URL
@@ -268,7 +281,7 @@ spec:
           valueFrom:
             secretKeyRef:
               key: postgres-password
-              name: pg
+              name: paperless
         - name: POSTGRESQL_ENABLE_LDAP
           value: "no"
         - name: POSTGRESQL_ENABLE_TLS