From 4e46844f6178955860d1698783a676a855658105 Mon Sep 17 00:00:00 2001
From: Michael Thomas <michaelhthomas@outlook.com>
Date: Sat, 17 May 2025 11:55:15 -0400
Subject: [PATCH] fix(mealie): use keycloak for auth

---
 modules/services/mealie/default.nix | 11 ++++++-----
 1 file changed, 6 insertions(+), 5 deletions(-)

diff --git a/modules/services/mealie/default.nix b/modules/services/mealie/default.nix
index 47373f4..cf658d8 100644
--- a/modules/services/mealie/default.nix
+++ b/modules/services/mealie/default.nix
@@ -31,12 +31,13 @@ in {
 
         # OIDC
         OIDC_AUTH_ENABLED = true;
-        OIDC_CONFIGURATION_URL = "https://authentik.thomasfmly.org/application/o/mealie/.well-known/openid-configuration";
-        OIDC_CLIENT_ID = "FLFfJCP0nWsxGfHpAf26XfoqMaIoUuaVdODJLW28";
-        OIDC_CLIENT_SECRET = "YSEfBhGQUmzAKnrAEi9413NM4m8juF8u7e8zOLzfCA1JXZdRsgj8WWXTKLqEeGhCiQsVvD1iX52sFcWqOWo2r7tpolpUUVymj8O4kfMWampO1Nn65K2aPFtuXu3soUwB";
-        OIDC_ADMIN_GROUP = "Administrators";
+        OIDC_CONFIGURATION_URL = "https://auth.thomasfmly.org/realms/gringotts/.well-known/openid-configuration";
+        OIDC_CLIENT_ID = "mealie";
+        OIDC_CLIENT_SECRET = "cBh876vWKoMgJSWLVJkVv6kPvUoNkvxD";
+        OIDC_GROUPS_CLAIM = "roles";
+        OIDC_ADMIN_GROUP = "admin";
         OIDC_AUTO_REDIRECT = true;
-        OIDC_PROVIDER_NAME = "Authentik";
+        OIDC_PROVIDER_NAME = "Keycloak";
       };
     };