Miniflux

bxl-shp/apps/docker-compose.miniflux.yaml

@@ -0,0 +1,32 @@
+services:
+  miniflux:
+    container_name: miniflux
+    image: miniflux/miniflux:latest
+    environment:
+    - BASE_URL=https://miniflux.bhasher.com
+    - DATABASE_URL=${MINIFLUX_DATABASE_URL}
+    - RUN_MIGRATIONS=1
+    - OAUTH2_PROVIDER=oidc
+    - OAUTH2_CLIENT_ID=miniflux
+    - OAUTH2_CLIENT_SECRET=${MINIFLUX_CLIENT_SECRET}
+    - OAUTH2_REDIRECT_URL=https://miniflux.bhasher.com/oauth2/oidc/callback
+    - OAUTH2_OIDC_DISCOVERY_ENDPOINT=https://idp.bhasher.com
+    - OAUTH2_USER_CREATION=1
+    labels:
+    - "traefik.enable=true"
+    - "traefik.http.routers.miniflux.rule=Host(`miniflux.bhasher.com`)"
+    - "traefik.http.services.miniflux.loadbalancer.server.port=8080"
+    - "traefik.http.routers.miniflux.tls=true"
+    - "traefik.http.routers.miniflux.tls.certresolver=http"
+    - "traefik.http.routers.miniflux.entrypoints=internalsecure"
+    healthcheck:
+      test: ["CMD", "/usr/bin/miniflux", "-healthcheck", "auto"]
+    networks:
+    - storage
+    - external
+
+networks:
+  storage:
+    external: true
+  external:
+    external: true

bxl-shp/config/idp/authelia.configuration.yaml

@@ -179,3 +179,17 @@ identity_providers:
       - groups
       - email
       userinfo_signing_algorithm: none
+    - id: miniflux
+      description: Miniflux
+      secret: '$argon2id$v=19$m=65536,t=3,p=4$6CLrUJhwSMsOAryD/Fn0JA$1Lw6ECq0SSxDOQhbxM3nuHaXaEbXyVOgndGjAkTmkbc'
+      public: false
+      authorization_policy: one_factor
+      redirect_uris:
+      - https://miniflux.bhasher.com/oauth2/oidc/callback
+      consent_mode: implicit
+      scopes:
+      - openid
+      - profile
+      - groups
+      - email
+      userinfo_signing_algorithm: none