Jinemi/thermograph
4
0
Fork 0
Code Issues 2 Pull requests 3 Projects Releases Packages Wiki Activity Actions

Forgejo: auto-link Google SSO logins by verified email (#16)

Browse source
This commit is contained in:
emi 2026-07-21 20:22:10 +00:00
parent 62a8c8c805
commit 6ad51e3597
1 changed files with 7 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
deploy/forgejo/docker-stack.yml
View file

@ -71,6 +71,13 @@ services:
FORGEJO__security__INSTALL_LOCK: "true" FORGEJO__security__INSTALL_LOCK: "true"
# Actions on: repo/org/user-level runners register against this instance. # Actions on: repo/org/user-level runners register against this instance.
FORGEJO__actions__ENABLED: "true" FORGEJO__actions__ENABLED: "true"
# Google SSO account handling: auto-link an OAuth login to the existing
# account with the same (Google-verified) email — so signing in with
# Google lands on the admin account instead of prompting for a password
# link. Auto-registration stays OFF, so a Google email that matches no
# existing user is rejected rather than silently granted an account.
FORGEJO__oauth2_client__ACCOUNT_LINKING: "auto"
FORGEJO__oauth2_client__ENABLE_AUTO_REGISTRATION: "false"
# Gitea/Forgejo's app.ini env-mapping honors a __FILE suffix to read a # Gitea/Forgejo's app.ini env-mapping honors a __FILE suffix to read a
# value from a file instead of the literal env var — same convention as # value from a file instead of the literal env var — same convention as
# the official Postgres image's POSTGRES_PASSWORD_FILE above. # the official Postgres image's POSTGRES_PASSWORD_FILE above.