From ecded440761c720f8bdd51fdb5b9c656f3c1447c Mon Sep 17 00:00:00 2001
From: clover caruso <git@paperclover.net>
Date: Sun, 18 Jan 2026 02:12:58 -0800
Subject: [PATCH] fix: jellyfin sso

---
 config/jellyfin/Caddyfile    |  2 ++
 config/jellyfin/branding.xml | 13 ++++++++-----
 generate-env.sh              |  4 ++--
 3 files changed, 12 insertions(+), 7 deletions(-)

diff --git a/config/jellyfin/Caddyfile b/config/jellyfin/Caddyfile
index ecbdb0e4c5cf6af22ab12f7427490c35c582463f..2fa8b2c1f5c7f25f6532f0e4d6c69626289900cf 100644
--- a/config/jellyfin/Caddyfile
+++ b/config/jellyfin/Caddyfile
@@ -1,4 +1,6 @@
 jelly.{$HOME_DOMAIN} {
+  redir /sso/snow /sso/OID/start/snow
+
 	handle_path /web/main.jellyfin*.css {
 		header Content-Type "text/css"
 		respond 200 {
diff --git a/config/jellyfin/branding.xml b/config/jellyfin/branding.xml
index 95799ad63674e402db18cfe85bb373b63bbec586..b2a7f7820e1c583a3d85b3f1134d574997631905 100644
--- a/config/jellyfin/branding.xml
+++ b/config/jellyfin/branding.xml
@@ -1,9 +1,12 @@
 <?xml version="1.0" encoding="utf-8"?>
 <BrandingOptions xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema">
-  <LoginDisclaimer>&lt;h2&gt;you are not logged in...&lt;/h2&gt;
-&lt;a href=&quot;/sso/OID/start/snow&quot; class=&quot;raised block emby-button button-submit snow-sign-on&quot;&gt;
-  snow sign on
-&lt;/a&gt;
+  <LoginDisclaimer>
+&lt;form id=snow-sign-on-form action=&quot;/sso/snow&quot; method=POST&gt;
+  &lt;h2&gt;you are not logged in...&lt;/h2&gt;
+  &lt;button type=submit class=&quot;raised block emby-button button-submit snow-sign-on&quot;&gt;
+    snow sign on
+  &lt;/button&gt;
+&lt;/form&gt;
 
 and then we knew, just like paper airplanes: that we could fly.</LoginDisclaimer>
   <CustomCss>.loginDisclaimer {width:100%}
@@ -27,7 +30,7 @@ mask-image:url(data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmc
 mask-size:cover;
 background:var(--main-text);
 }</CustomCss>
-  <SplashscreenEnabled>true</SplashscreenEnabled>
+  <SplashscreenEnabled>false</SplashscreenEnabled>
   <SplashscreenLocation>/config/upload/splashscreen-upload.jpg</SplashscreenLocation>
 </BrandingOptions>
 
diff --git a/generate-env.sh b/generate-env.sh
index df4ddbee2211f4859e22bdfa4b471945d697adb2..1f42f0ee8ec0295cf0740ab6270f78856d0cd6d8 100644
--- a/generate-env.sh
+++ b/generate-env.sh
@@ -38,8 +38,8 @@ template() {
   add "POSTGRES_PASSWORD_EVIL_FORGEJO" "$(secret 32)"
 
   section "misc keys"
-  add "ANUBIS_PRIVATE_KED" "$(secret 32)"
-  add "FORWARD_AUTH_KED" "$(secret 32)"
+  add "ANUBIS_PRIVATE_KEY" "$(secret 32)"
+  add "FORWARD_AUTH_KEY" "$(secret 32)"
   add "CLOVER_SOT_KEY" ""
 
   section "forgejo"
-- 
2.54.0