add: add paperlessngx oidc

paperless-ngx/docker-compose.yaml

@@ -33,6 +33,29 @@ services:
       PAPERLESS_TIKA_ENABLED: 1
       PAPERLESS_TIKA_GOTENBERG_ENDPOINT: http://gotenberg:3000
       PAPERLESS_TIKA_ENDPOINT: http://tika:9998
+      PAPERLESS_APPS: allauth.socialaccount.providers.openid_connect
+      PAPERLESS_SOCIALACCOUNT_PROVIDERS: >
+          {
+            "openid_connect": {
+              "OAUTH_PKCE_ENABLED": true,
+              "APPS": [
+                {
+                  "provider_id": "authentik",
+                  "name": "authentik",
+                  "client_id": "<client_id>",
+                  "secret": "<client_secret>",
+                  "settings": {
+                    "server_url": "https://authentik.company/application/o/<application_slug>/.well-known/openid-configuration",
+                    "fetch_userinfo": true
+                  }
+                }
+              ],
+              "SCOPE": ["openid", "profile", "email"]
+            }
+          }
+      PAPERLESS_LOGOUT_REDIRECT_URL: "https://authentik.company/application/o/<application_slug>/end-session/"
+      PAPERLESS_SOCIAL_AUTO_SIGNUP: true
+      PAPERLESS_SOCIALACCOUNT_ALLOW_SIGNUPS: true
   gotenberg:
     image: docker.io/gotenberg/gotenberg:8.25
     restart: unless-stopped