grist: enable, configure oidc

forgejo/docker-compose.yml

@@ -6,7 +6,7 @@ volumes:
 
 services:
   server:
-    image: codeberg.org/forgejo/forgejo
+    image: codeberg.org/forgejo/forgejo:1.21
     restart: always
     volumes:
       - server:/data

grist/docker-compose.yml

@@ -14,14 +14,10 @@ services:
       APP_HOME_URL: https://grist.dmeiburg.de
       GRIST_SESSION_SECRET: ${SECRET}
       GRIST_SANDBOX_FLAVOR: gvisor
-      GRIST_SAML_IDP_UNENCRYPTED: 1
-      GRIST_SAML_SP_HOST: https://grist.dmeiburg.de
-      GRIST_SAML_IDP_LOGIN: https://sso.dmeiburg.de/application/saml/grist/sso/binding/redirect/
-      GRIST_SAML_IDP_LOGOUT: https://sso.dmeiburg.de/if/session-end/grist/
-      GRIST_SAML_IDP_CERTS: /certs/authentik.pem
-      GRIST_SAML_SP_KEY: /certs/grist_private_key.pem
-      GRIST_SAML_SP_CERT: /certs/grist_certificate.pem
       GRIST_FORCE_LOGIN: true
+      GRIST_OIDC_IDP_ISSUER: https://sso.dmeiburg.de/application/o/grist/.well-known/openid-configuration
+      GRIST_OIDC_IDP_CLIENT_ID: ${OIDC_ID}
+      GRIST_OIDC_IDP_CLIENT_SECRET: ${OIDC_SECRET}
     expose: 
         - 8484
 networks: