hedgedoc: keycloak auth

hedgedoc/docker-compose.yaml

@@ -16,6 +16,19 @@ services:
       - CMD_DB_URL=postgres://hedgedoc:password@database:5432/hedgedoc
       - CMD_DOMAIN=spacestation
       - CMD_URL_ADDPORT=true
+      - CMD_OAUTH2_USER_PROFILE_URL=http://spacestation:8080/realms/spacestation/protocol/openid-connect/userinfo
+      - CMD_OAUTH2_USER_PROFILE_USERNAME_ATTR=preferred_username
+      - CMD_OAUTH2_USER_PROFILE_DISPLAY_NAME_ATTR=name
+      - CMD_OAUTH2_USER_PROFILE_EMAIL_ATTR=email
+      - CMD_OAUTH2_TOKEN_URL=http://spacestation:8080/realms/spacestation/protocol/openid-connect/token
+      - CMD_OAUTH2_AUTHORIZATION_URL=http://spacestation:8080/realms/spacestation/protocol/openid-connect/auth
+      - CMD_OAUTH2_CLIENT_ID=hedgedoc
+      - CMD_OAUTH2_CLIENT_SECRET=NNtfTHMlme8LmkTvRS0T3i3L8zGGuqHT
+      - CMD_OAUTH2_PROVIDERNAME=Keycloak
+      - CMD_SESSION_SECRET=abcdef1234
+        # - CMD_DOMAIN=<hedgedoc.example.com>
+        # - CMD_PROTOCOL_USESSL=true
+        # - CMD_URL_ADDPORT=false
     volumes:
       - uploads:/hedgedoc/public/uploads
     ports: