From 0a51852cb25c8ae89ae57a3b82ce6b460f94e8bb Mon Sep 17 00:00:00 2001 From: Bendik Aagaard Lynghaug Date: Wed, 23 Sep 2026 12:27:36 +0200 Subject: [PATCH] deploy: carry KANIDM_API_TOKEN into the instance env Co-Authored-By: Claude Fable 5.1 Claude-Session: https://claude.ai/code/session_01L4jrCgLiKKHAEFuZUJjckH --- .gitea/workflows/deploy.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml index 85b8aff..74a0aef 100644 --- a/.gitea/workflows/deploy.yml +++ b/.gitea/workflows/deploy.yml @@ -57,6 +57,10 @@ jobs: KANIDM_URL=${{ vars.KANIDM_URL }} OAUTH2_CLIENT_ID=${{ vars.OAUTH2_CLIENT_ID }} OAUTH2_CLIENT_SECRET=${{ secrets.OAUTH2_CLIENT_SECRET }} + # Onboarding from a desk (portal 0.3.40+, `invite:` alternatives): a + # Kanidm service-account token in idm_people_on_boarding. Empty + # means invites are not configured on this instance. + KANIDM_API_TOKEN=${{ secrets.KANIDM_API_TOKEN }} PUBLIC_URL=${{ vars.PUBLIC_URL }} COOKIE_SECURE=true # This repo is its own instance's content source; branding