komga: auth via authentik

services/komga.yml

@@ -1,8 +1,30 @@
 ---
+configs:
+  komga-config:
+    content: |
+      spring:
+        security:
+            oauth2:
+                client:
+                    registration:
+                        authentik:
+                            provider: authentik
+                            client-id: 4CsVDypjllNpB6oaqBh8JNVtRt5kFIzIQcjtJFCo
+                            client-secret: nknziTm88F8AM6qW5NTelvtRYKG50pw8dACUXgz6fa3apDA6ATkxjbABgEdfHZWs97PFwRyVTr55bcApRqwrtmDefJMlJk1oYeOxhH6DA2oyiDXfXjfR2zVjZLMArnIC
+                            client-name: authentik
+                            scope: openid,email,profile
+                            authorization-grant-type: authorization_code
+                            redirect-uri: "{baseUrl}/{action}/oauth2/code/{registrationId}"
+                    provider:
+                        authentik:
+                            user-name-attribute: sub
+                            issuer-uri: https://authentik.kucharczyk.xyz/application/o/komga/
 services:
   komga:
     image: gotson/komga:1.20.0
     container_name: komga
+    depends_on:
+      - authentik-server
     networks:
       public:
         ipv4_address: 192.168.240.34
@@ -15,4 +37,7 @@ services:
       - "${DOCKER_STORAGE_PATH}/komga:/config"
       - "${COMIC_PATH}:/data"
       - "${TORRENTS_SEED_PATH}:/import"
+    configs:
+      - source: komga-config
+        target: /config/application.yml
     restart: unless-stopped