feat: TinyAuth + traefik dash + sonarr forward auth

2026-04-01 00:11:23 +01:00
parent d71caea7d0
commit f17526afc3
9 changed files with 138 additions and 41 deletions
@@ -0,0 +1,17 @@
+---
+- name: Create tinyauth directory
+  file:
+    path: /opt/tinyauth
+    state: directory
+    mode: '0755'
+
+- name: Create docker-compose file for tinyauth
+  template:
+    src: docker-compose.yml.j2
+    dest: /opt/tinyauth/docker-compose.yml
+    mode: '0644'
+
+- name: Start tinyauth
+  shell: cd /opt/tinyauth && docker compose down && docker compose up -d
+  args:
+    chdir: /opt/tinyauth
@@ -0,0 +1,17 @@
+services:
+  tinyauth:
+    image: ghcr.io/steveiliop56/tinyauth:v5
+    container_name: tinyauth
+    restart: unless-stopped
+    ports:
+      - "3000:3000"
+    environment:
+      - TINYAUTH_APPURL=https://auth-proxy.{{ domain }}
+      - TINYAUTH_OAUTH_PROVIDERS_POCKETID_CLIENTID={{ tinyauth_client_id }}
+      - TINYAUTH_OAUTH_PROVIDERS_POCKETID_CLIENTSECRET={{ tinyauth_client_secret }}
+      - TINYAUTH_OAUTH_PROVIDERS_POCKETID_AUTHURL={{ tinyauth_oidc_provider }}/authorize
+      - TINYAUTH_OAUTH_PROVIDERS_POCKETID_TOKENURL={{ tinyauth_oidc_provider }}/api/oidc/token
+      - TINYAUTH_OAUTH_PROVIDERS_POCKETID_USERINFOURL={{ tinyauth_oidc_provider }}/api/oidc/userinfo
+      - TINYAUTH_OAUTH_PROVIDERS_POCKETID_REDIRECTURL=https://auth-proxy.{{ domain }}/api/oauth/callback/pocketid
+      - TINYAUTH_OAUTH_PROVIDERS_POCKETID_SCOPES=openid email profile groups
+      - TINYAUTH_OAUTH_PROVIDERS_POCKETID_NAME=Pocket ID