From 8b49b347b5446d667dd809622f7cdf331540dcbc Mon Sep 17 00:00:00 2001
From: Story Crater Bot <19826264+Riotpiaole@users.noreply.github.com>
Date: Tue, 25 Aug 2026 13:05:50 -0700
Subject: [PATCH] fix: disable email verification requirement on paperless OIDC
 signup

allauth defaulted to ACCOUNT_EMAIL_VERIFICATION=mandatory, and building the confirmation link 500'd with NoReverseMatch on account_confirm_email (paperless-ngx doesn't wire up that view, no SMTP configured either). Authentik already verifies identity via OIDC, so this step is redundant.
---
 k8s/apps/paperless/configmap.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/k8s/apps/paperless/configmap.yaml b/k8s/apps/paperless/configmap.yaml
index 5dbaa87..6a0bfc8 100644
--- a/k8s/apps/paperless/configmap.yaml
+++ b/k8s/apps/paperless/configmap.yaml
@@ -15,3 +15,8 @@ data:
   # env vars can't be split across a ConfigMap + Secret for the same key, so
   # this whole value is sourced from the Secret in deployment.yaml instead.
   PAPERLESS_APPS: "allauth.socialaccount.providers.openid_connect"
+  # Authentik already verifies identity via OIDC - a second email-confirmation
+  # step has no SMTP configured to send it anyway, and paperless-ngx doesn't
+  # wire up allauth's confirm-email view, so signup 500s with NoReverseMatch
+  # on 'account_confirm_email' without this.
+  PAPERLESS_ACCOUNT_EMAIL_VERIFICATION: "none"