OAuth setup with tsidp (and tailscale sidecar)

[daallgeier]

Configuration Example

This post is meant to serve as a companion to the guide in the docs with examples specifically for Tailscale IDP (tsidp). The following configurations are only partial and are intended only as examples. You will likely need to modify them as necessary for your particular setup.

Tailscale IDP Configuration

Important

This is only an example and is not a full configuration. As a prerequisite you should already have the tsidp container running. Also read through the tsidp github and adjust your configuration as needed. Make sure your tailscale sidecar has TS_ACCEPT_DNS=true set to true.

Mealie Configuration

These are the minimum required environment variables to get it working. See the docs for full options.

OIDC_AUTH_ENABLED=True
OIDC_SIGNUP_ENABLED=True
OIDC_CONFIGURATION_URL=https://idp.ts1234.ts.net/.well-known/openid-configuration
OIDC_CLIENT_ID=<plaintext_id>
OIDC_CLIENT_SECRET=<plaintext_secret>