apiVersion: v1
kind: ConfigMap
metadata:
  name: paperless-config
data:
  PAPERLESS_URL: "https://paperless.riotpiao.com"
  PAPERLESS_TIME_ZONE: "America/Los_Angeles"
  PAPERLESS_OCR_LANGUAGE: "eng"
  PAPERLESS_DBHOST: "paperless-db-rw"
  PAPERLESS_DBNAME: "paperless"
  PAPERLESS_REDIS: "redis://paperless-redis:6379"
  # django-allauth generic OIDC provider. The client_id/secret/server_url
  # bundle itself lives in the paperless-oidc Secret
  # (SOCIALACCOUNT_PROVIDERS_JSON key, composed by authentik-provision.py) -
  # env vars can't be split across a ConfigMap + Secret for the same key, so
  # this whole value is sourced from the Secret in deployment.yaml instead.
  PAPERLESS_APPS: "allauth.socialaccount.providers.openid_connect"
  # Authentik already verifies identity via OIDC - a second email-confirmation
  # step has no SMTP configured to send it anyway, and paperless-ngx doesn't
  # wire up allauth's confirm-email view, so signup 500s with NoReverseMatch
  # on 'account_confirm_email' without this.
  PAPERLESS_ACCOUNT_EMAIL_VERIFICATION: "none"
  # Auto-connect social accounts to existing users with matching email
  PAPERLESS_SOCIALACCOUNT_AUTO_SIGNUP: "true"
  # Allow automatic linking of social accounts to existing users
  PAPERLESS_ACCOUNT_ALLOW_SIGNUPS: "true"
  # Connect social accounts to existing users with matching email
  PAPERLESS_SOCIALACCOUNT_EMAIL_AUTHENTICATION: "true"
  PAPERLESS_SOCIALACCOUNT_EMAIL_AUTHENTICATION_AUTO_CONNECT: "true"