diff --git a/k8s/apps/paperless/configmap.yaml b/k8s/apps/paperless/configmap.yaml
index 5dbaa87..6a0bfc8 100644
--- a/k8s/apps/paperless/configmap.yaml
+++ b/k8s/apps/paperless/configmap.yaml
@@ -15,3 +15,8 @@ data:
   # env vars can't be split across a ConfigMap + Secret for the same key, so
   # this whole value is sourced from the Secret in deployment.yaml instead.
   PAPERLESS_APPS: "allauth.socialaccount.providers.openid_connect"
+  # Authentik already verifies identity via OIDC - a second email-confirmation
+  # step has no SMTP configured to send it anyway, and paperless-ngx doesn't
+  # wire up allauth's confirm-email view, so signup 500s with NoReverseMatch
+  # on 'account_confirm_email' without this.
+  PAPERLESS_ACCOUNT_EMAIL_VERIFICATION: "none"