From 96d52005764779eec4da318da3611090294a8eb1 Mon Sep 17 00:00:00 2001
From: BhasherBEL <git.it@bhasher.com>
Date: Sun, 10 Dec 2023 23:21:21 +0100
Subject: [PATCH] Miniflux

---
 bxl-shp/apps/docker-compose.miniflux.yaml     | 32 +++++++++++++++++++
 .../config/idp/authelia.configuration.yaml    | 14 ++++++++
 2 files changed, 46 insertions(+)
 create mode 100644 bxl-shp/apps/docker-compose.miniflux.yaml

diff --git a/bxl-shp/apps/docker-compose.miniflux.yaml b/bxl-shp/apps/docker-compose.miniflux.yaml
new file mode 100644
index 0000000..1984645
--- /dev/null
+++ b/bxl-shp/apps/docker-compose.miniflux.yaml
@@ -0,0 +1,32 @@
+services:
+  miniflux:
+    container_name: miniflux
+    image: miniflux/miniflux:latest
+    environment:
+    - BASE_URL=https://miniflux.bhasher.com
+    - DATABASE_URL=${MINIFLUX_DATABASE_URL}
+    - RUN_MIGRATIONS=1
+    - OAUTH2_PROVIDER=oidc
+    - OAUTH2_CLIENT_ID=miniflux
+    - OAUTH2_CLIENT_SECRET=${MINIFLUX_CLIENT_SECRET}
+    - OAUTH2_REDIRECT_URL=https://miniflux.bhasher.com/oauth2/oidc/callback
+    - OAUTH2_OIDC_DISCOVERY_ENDPOINT=https://idp.bhasher.com
+    - OAUTH2_USER_CREATION=1
+    labels:
+    - "traefik.enable=true"
+    - "traefik.http.routers.miniflux.rule=Host(`miniflux.bhasher.com`)"
+    - "traefik.http.services.miniflux.loadbalancer.server.port=8080"
+    - "traefik.http.routers.miniflux.tls=true"
+    - "traefik.http.routers.miniflux.tls.certresolver=http"
+    - "traefik.http.routers.miniflux.entrypoints=internalsecure"
+    healthcheck:
+      test: ["CMD", "/usr/bin/miniflux", "-healthcheck", "auto"]
+    networks:
+    - storage
+    - external
+
+networks:
+  storage:
+    external: true
+  external:
+    external: true
diff --git a/bxl-shp/config/idp/authelia.configuration.yaml b/bxl-shp/config/idp/authelia.configuration.yaml
index 9da1db3..e9f0a71 100644
--- a/bxl-shp/config/idp/authelia.configuration.yaml
+++ b/bxl-shp/config/idp/authelia.configuration.yaml
@@ -179,3 +179,17 @@ identity_providers:
       - groups
       - email
       userinfo_signing_algorithm: none
+    - id: miniflux
+      description: Miniflux
+      secret: '$argon2id$v=19$m=65536,t=3,p=4$6CLrUJhwSMsOAryD/Fn0JA$1Lw6ECq0SSxDOQhbxM3nuHaXaEbXyVOgndGjAkTmkbc'
+      public: false
+      authorization_policy: one_factor
+      redirect_uris:
+      - https://miniflux.bhasher.com/oauth2/oidc/callback
+      consent_mode: implicit
+      scopes:
+      - openid
+      - profile
+      - groups
+      - email
+      userinfo_signing_algorithm: none