allauth defaulted to ACCOUNT_EMAIL_VERIFICATION=mandatory, and building the confirmation link 500'd with NoReverseMatch on account_confirm_email (paperless-ngx doesn't wire up that view, no SMTP configured either). Authentik already verifies identity via OIDC, so this step is redundant.
23 lines
1.0 KiB
YAML
23 lines
1.0 KiB
YAML
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: paperless-config
|
|
data:
|
|
PAPERLESS_URL: "https://paperless.riotpiao.com"
|
|
PAPERLESS_TIME_ZONE: "America/Los_Angeles"
|
|
PAPERLESS_OCR_LANGUAGE: "eng"
|
|
PAPERLESS_DBHOST: "paperless-db-rw"
|
|
PAPERLESS_DBNAME: "paperless"
|
|
PAPERLESS_REDIS: "redis://paperless-redis:6379"
|
|
# django-allauth generic OIDC provider. The client_id/secret/server_url
|
|
# bundle itself lives in the paperless-oidc Secret
|
|
# (SOCIALACCOUNT_PROVIDERS_JSON key, composed by authentik-provision.py) -
|
|
# env vars can't be split across a ConfigMap + Secret for the same key, so
|
|
# this whole value is sourced from the Secret in deployment.yaml instead.
|
|
PAPERLESS_APPS: "allauth.socialaccount.providers.openid_connect"
|
|
# Authentik already verifies identity via OIDC - a second email-confirmation
|
|
# step has no SMTP configured to send it anyway, and paperless-ngx doesn't
|
|
# wire up allauth's confirm-email view, so signup 500s with NoReverseMatch
|
|
# on 'account_confirm_email' without this.
|
|
PAPERLESS_ACCOUNT_EMAIL_VERIFICATION: "none"
|