I currently struggle configuring OpenID by using environment variables. Here’s what I tried: VIKUNJA_AUTH_OPENID_PROVIDERS: KEYCLOAK VIKUNJA_AUTH_OPENID_PROVIDERS_KEYCLOAK_NAME: KeyCloak VIKUNJA_AUTH_OPENID_PROVIDERS_KEYCLOAK_AUTHURL: ... VIKUNJA_AUTH_OPENID_PROVIDERS_KEYCLOAK_CLIENTID: vikunja VI…

Configuring openid via env variables is currently not supported. You’ll need to use a config file for that. It is possible to use both env and config files at the same time, that way you could put only the openid config in the config file and use env variables for the rest.

I think this would make sense, but would be a breaking change. As such, I don’t plan to implement it in the near future but added it to the backlog.

Just one follow-up question: is it possible to expand environment variables in the config file? The point is that I don’t want to put the openid clientsecret into the config file (I’m using a docker-compose setup with all files but .env in git). Like this: auth: local: enabled: false openi…

I am hitting the exact same issue :confused: wouldn’t it be possible to simply add an extra environment variable for the meantime? Either way, the documentation should reflect the current state, it says: You can […] set all config option with environment variables. It should at least be mention…

I’ve added a notice to the doc you mentioned.

I would also be interested in this. In nixos, the config file will be world readable in the nix store. Using environment variables is the only secure way of passing those secrets to the service.

I’m also interested. Also installed Vikunja with NixOS and the client secret is world readable

Are there any updates? It would be really great to have this. This is my config (values.yaml) for HELM deployed in K8S: vikunja: api: env: VIKUNJA_SERVICE_PUBLICURL: https://vikunja.host.com/ VIKUNJA_DATABASE_TYPE: "postgres" VIKUNJA_DATABASE_HOST: "vikunja-db-cluster.post…

A possible workaround for sops-nix users could be using a template for the configuration file: GitHub - Mic92/sops-nix: Atomic secret provisioning for NixOS based on sops

Configure OpenID via environment

Support

thm 23 May 2022 08:13 3

Thanks for the reply. Any plans on implementing this? It would be handy to have for docker-compose deployments.

Topic		Replies	Views
Configure OpenID secrets via env variables Support	2	222	3 February 2025
Authentik OIDC config with env variables Support	2	157	24 September 2025
SSO Keycloak error HTTP 405 Method Not Allowed (Solved) Support	1	1947	1 March 2025
Can't get openid connect to work Support	3	1200	10 March 2024
No longer able to login via OIDC Bug	17	645	19 September 2025

Configure OpenID via environment

Related topics