Fixup

docker/authelia/config/configuration.oidc.clients.yml

@@ -28,5 +28,32 @@ identity_providers:
         redirect_uris:
           - https://headscale.{{ env "TRAEFIK_DOMAIN" }}/oidc/callback
           - https://headscale.{{ env "TRAEFIK_DOMAIN" }}/admin/oidc/callback # headplane on same domain as headscale
+          - https://headadmin.{{ env "TRAEFIK_DOMAIN" }}/oidc_callback
           # - https://headplane.{{ env "TRAEFIK_DOMAIN" }}/admin/oidc/callback # headplane on it's own domain
+        userinfo_signed_response_alg: none
+      - client_id: headadmin
+        client_name: headadmin
+        client_secret: {{ secret "/run/secrets/CLIENT_SECRET_HEADADMIN" }}
+        public: false
+        authorization_policy: headadmin
+        consent_mode: implicit
+        scopes:
+          - openid
+          - email
+          - profile
+        redirect_uris:
+          - https://headadmin.{{ env "TRAEFIK_DOMAIN" }}/oidc_callback
+        userinfo_signed_response_alg: none
+      - client_id: git
+        client_name: git
+        client_secret: {{ secret "/run/secrets/CLIENT_SECRET_GIT" }}
+        public: false
+        authorization_policy: git
+        consent_mode: implicit
+        scopes:
+          - openid
+          - email
+          - profile
+        redirect_uris:
+          - https://git.{{ env "TRAEFIK_DOMAIN" }}/oidc_callback
         userinfo_signed_response_alg: none