fix: forgejo oauth scopes flag syntax
unquoted --scopes=openid email profile groups passed email/profile/
groups as stray positional args; forgejo 13 CLI hard-errors on them,
crash-looping the container on every restart. keycloak also rejects
scopes beyond openid for this client, so request openid only (matches
the login_source config that ran in prod).
1 files changed, 1 insertions(+), 1 deletions(-)
config/forgejo/init/config.sh+1-1
| ... | ... | @@ -8,7 +8,7 @@ openid_args="--provider=openidConnect \ |
| 8 | 8 | --key=forgejo \ |
| 9 | 9 | --secret=$FORGEJO_OPENID_SECRET \ |
| 10 | 10 | --auto-discover-url=https://auth.$HOME_DOMAIN/realms/master/.well-known/openid-configuration \ |
| 11 | | --scopes=openid email profile groups" |
| 11 | --scopes=openid" |
| 12 | 12 | |
| 13 | 13 | forgejo migrate |
| 14 | 14 | |
clover caruso <git@paperclover.net> 2026-06-10 23:58:46-07:00
Signed by SSH key SHA256:xbd+BjjhyBfwk7GVoURf9Yx0gzDerHbvYv7SddNWmAs