LDAP

.env.example

@@ -0,0 +1,13 @@
+# Copy to a private deployment environment/.env file. Never commit secrets.
+BUTTON_OIDC_ISSUER=https://dex.eom.dev
+BUTTON_OIDC_CLIENT_ID=the-button
+BUTTON_OIDC_CLIENT_SECRET=replace-with-dex-client-secret
+BUTTON_OIDC_REDIRECT_URI=https://button.eom.dev/auth/oidc/callback
+BUTTON_OIDC_REQUIRED_GROUP=the-button-users
+BUTTON_OIDC_ADMIN_GROUP=the-button-admins
+BUTTON_OIDC_SUBJECT_LINKS_JSON={}
+BUTTON_OIDC_ADMIN_SUBJECTS_JSON=[]
+BUTTON_OIDC_REGISTER_URL=https://lists.eom.dev/accounts/register/
+BUTTON_OIDC_COOKIE_SECURE=1
+# HTTP is allowed only in isolated local OIDC tests:
+# BUTTON_OIDC_ALLOW_HTTP=1