From c232240d66a952788a6147c0b4170a2d861dbc06 Mon Sep 17 00:00:00 2001
From: duynguyen <huonghaiduynhim@gmail.com>
Date: Fri, 6 Feb 2026 10:09:12 +0000
Subject: [PATCH] add: add paperlessngx oidc

---
 paperless-ngx/docker-compose.yaml | 23 +++++++++++++++++++++++
 1 file changed, 23 insertions(+)

diff --git a/paperless-ngx/docker-compose.yaml b/paperless-ngx/docker-compose.yaml
index 59bda12..26ed409 100644
--- a/paperless-ngx/docker-compose.yaml
+++ b/paperless-ngx/docker-compose.yaml
@@ -33,6 +33,29 @@ services:
       PAPERLESS_TIKA_ENABLED: 1
       PAPERLESS_TIKA_GOTENBERG_ENDPOINT: http://gotenberg:3000
       PAPERLESS_TIKA_ENDPOINT: http://tika:9998
+      PAPERLESS_APPS: allauth.socialaccount.providers.openid_connect
+      PAPERLESS_SOCIALACCOUNT_PROVIDERS: >
+          {
+            "openid_connect": {
+              "OAUTH_PKCE_ENABLED": true,
+              "APPS": [
+                {
+                  "provider_id": "authentik",
+                  "name": "authentik",
+                  "client_id": "<client_id>",
+                  "secret": "<client_secret>",
+                  "settings": {
+                    "server_url": "https://authentik.company/application/o/<application_slug>/.well-known/openid-configuration",
+                    "fetch_userinfo": true
+                  }
+                }
+              ],
+              "SCOPE": ["openid", "profile", "email"]
+            }
+          }
+      PAPERLESS_LOGOUT_REDIRECT_URL: "https://authentik.company/application/o/<application_slug>/end-session/"
+      PAPERLESS_SOCIAL_AUTO_SIGNUP: true
+      PAPERLESS_SOCIALACCOUNT_ALLOW_SIGNUPS: true
   gotenberg:
     image: docker.io/gotenberg/gotenberg:8.25
     restart: unless-stopped