paperless secret update + iam

paperless/main.yaml

@@ -134,18 +134,26 @@ spec:
       - env:
         - name: COMPOSE_PROJECT_NAME
           value: paperless
+        - name: PAPERLESS_APPS
+          value: allauth.socialaccount.providers.openid_connect
         - name: PAPERLESS_DBHOST
           value: paperless-postgresql
         - name: PAPERLESS_DBPASS
           valueFrom:
             secretKeyRef:
               key: db-pass
-              name: pg
+              name: paperless
         - name: PAPERLESS_DBUSER
           valueFrom:
             secretKeyRef:
               key: db-user
-              name: pg
+              name: paperless
+        - name: PAPERLESS_ENABLE_HTTP_REMOTE_USER
+          value: "true"
+        - name: PAPERLESS_HTTP_REMOTE_USER_HEADER_NAME
+          value: HTTP_X_FORWARDED_USER
+        - name: PAPERLESS_LOGOUT_REDIRECT_URL
+          value: https://iam.borninpain.de/realms/home/protocol/openid-connect/logout
         - name: PAPERLESS_OCR_LANGUAGE
           value: deu
         - name: PAPERLESS_OCR_LANGUAGES
@@ -156,7 +164,12 @@ spec:
           valueFrom:
             secretKeyRef:
               key: redis-url
-              name: redis
+              name: paperless
+        - name: PAPERLESS_SOCIALACCOUNT_PROVIDERS
+          valueFrom:
+            secretKeyRef:
+              key: provider
+              name: paperless
         - name: PAPERLESS_TIME_ZONE
           value: Europe/Berlin
         - name: PAPERLESS_URL
@@ -268,7 +281,7 @@ spec:
           valueFrom:
             secretKeyRef:
               key: postgres-password
-              name: pg
+              name: paperless
         - name: POSTGRESQL_ENABLE_LDAP
           value: "no"
         - name: POSTGRESQL_ENABLE_TLS

paperless/src/values.yaml

@@ -25,7 +25,7 @@ env:
   PAPERLESS_REDIS:
     valueFrom:
       secretKeyRef:
-        name: redis
+        name: paperless
         key: redis-url
   # -- OCR languages to install
   PAPERLESS_OCR_LANGUAGE: deu
@@ -38,12 +38,12 @@ env:
   PAPERLESS_DBUSER:
     valueFrom:
       secretKeyRef:
-        name: pg
+        name: paperless
         key: db-user
   PAPERLESS_DBPASS:
     valueFrom:
       secretKeyRef:
-        name: pg
+        name: paperless
         key: db-pass
   # -- Port to use
   PAPERLESS_PORT: 8000
@@ -52,6 +52,15 @@ env:
   # -- Password for the root user
   # PAPERLESS_ADMIN_PASSWORD: admin
   PAPERLESS_URL: https://paperless.home
+  PAPERLESS_APPS: allauth.socialaccount.providers.openid_connect
+  PAPERLESS_SOCIALACCOUNT_PROVIDERS:
+    valueFrom:
+      secretKeyRef:
+        name: paperless
+        key: provider
+  PAPERLESS_ENABLE_HTTP_REMOTE_USER: true
+  PAPERLESS_HTTP_REMOTE_USER_HEADER_NAME: HTTP_X_FORWARDED_USER
+  PAPERLESS_LOGOUT_REDIRECT_URL: https://iam.borninpain.de/realms/home/protocol/openid-connect/logout
 
 # -- Configures service settings for the chart.
 # @default -- See values.yaml
@@ -115,7 +124,7 @@ postgresql:
   image:
     tag: 13.15.0-debian-12-r6
   auth:
-    existingSecret: pg
+    existingSecret: paperless
 
 # -- Enable and configure redis subchart under this key.
 #    For more options see [redis chart documentation](https://github.com/bitnami/charts/tree/master/bitnami/redis)