From 4d6a8dde21e3f800156c0aaa2bfe859c57908486 Mon Sep 17 00:00:00 2001
From: tegwick <bernd.worsch@gmail.com>
Date: Mon, 19 Oct 2026 10:35:14 +0200
Subject: [PATCH] Declare approved Forgejo public PKCE development sign-in
 profile

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a15302-b965-7d43-a9d8-42710914b24e
---
 helm/forgejo-values.yaml | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/helm/forgejo-values.yaml b/helm/forgejo-values.yaml
index dad1c7e..3bb9812 100644
--- a/helm/forgejo-values.yaml
+++ b/helm/forgejo-values.yaml
@@ -84,6 +84,13 @@ preExtraInitContainers:
   terminationMessagePolicy: File
 
 gitea:
+  oauth:
+    - name: netkingdom
+      provider: openidConnect
+      key: forgejo
+      secret: ""
+      autoDiscoverUrl: https://kc.coulomb.social/.well-known/openid-configuration
+      scopes: openid,profile,email,groups
   admin:
     username: forgejo_admin
     email: admin@coulomb.social
@@ -98,6 +105,10 @@ gitea:
           name: forgejo-mailer
           key: MAILER_PASSWD
   config:
+    oauth2_client:
+      ENABLE_AUTO_REGISTRATION: false
+      ACCOUNT_LINKING: login
+      OPENID_CONNECT_SCOPES: openid profile email groups
     database:
       DB_TYPE: postgres
       HOST: forgejo-db-rw.databases.svc.cluster.local:5432