Ryan Malloy
64ba7a69de
- Remove required_scopes validation (Authentik doesn't embed scopes in JWT) - Add oauth_base_url config for proper HTTPS callback URLs - Add docker-compose.dev.yml for host proxy via Caddy - Update docker-compose.oauth.yml with unique domain label Authentik uses opaque access tokens that don't include scope claims. Authentication is enforced at the IdP level, so scope validation in the token is unnecessary and was causing 401 errors.
23 lines
658 B
YAML
23 lines
658 B
YAML
# Development proxy for mcvsphere running on host
|
|
# Usage: docker compose -f docker-compose.dev.yml up -d
|
|
|
|
services:
|
|
# Proxy container - just provides caddy labels for host-running server
|
|
mcvsphere-proxy:
|
|
image: alpine:latest
|
|
container_name: mcvsphere-proxy
|
|
command: ["sleep", "infinity"]
|
|
extra_hosts:
|
|
- "host.docker.internal:host-gateway"
|
|
networks:
|
|
- caddy
|
|
labels:
|
|
# Caddy reverse proxy to host-running mcvsphere server
|
|
caddy: mcp.l.supported.systems
|
|
# Use caddy network gateway (172.18.0.1) to reach host services
|
|
caddy.reverse_proxy: "172.18.0.1:8080"
|
|
|
|
networks:
|
|
caddy:
|
|
external: true
|