tirbofish/kitgit

# Copy to .env.prod and fill in secrets before deploy.
POSTGRES_PASSWORD=
AUTHENTIK_SECRET_KEY=
AUTHENTIK_BOOTSTRAP_PASSWORD=
AUTHENTIK_BOOTSTRAP_EMAIL=admin@tirbo.fish

KITGIT_PUBLIC_URL=https://git.tirbo.fish
# Optional; prod compose sets this to 22 so clone URLs omit a non-default port.
# KITGIT_SSH_PUBLIC_PORT=22
KITGIT_SESSION_SECRET=
KITGIT_OIDC_ISSUER=https://auth.tirbo.fish/application/o/kitgit/
KITGIT_OIDC_DISCOVERY_URL=http://authentik-server:9000/application/o/kitgit/
KITGIT_OIDC_CLIENT_ID=kitgit
KITGIT_OIDC_CLIENT_SECRET=
KITGIT_OIDC_REDIRECT_URL=https://git.tirbo.fish/auth/callback

KITGIT_AUTHENTIK_URL=http://authentik-server:9000
KITGIT_AUTHENTIK_API_TOKEN=
AUTHENTIK_TOKEN=
KITGIT_AUTHENTIK_AUTH_FLOW=default-authentication-flow