Beszel
Requirements
- Beszel server
- HTTPS connection to your Beszel server
Create OIDC Client in Pocket ID
- Create a new OIDC Client in Pocket ID (e.g.,
beszel
). - Set the Callback URL to the value below.
https://<your-beszel-url>/api/oauth2-redirect
- Optional: Download a PNG or SVG logo from the Beszel project and upload.
- Copy the Client ID, Client Secret, and Authorization URL, Token URL, and Userinfo URL for use in the next section.
Configure Pocket ID
- Open the Pocket ID settings page and navigate to
Application Configuration
. - Enable Emails Verified.
Configure Beszel
- Open the Beszel superuser interface (
/_/#settings
) and navigate to:Settings > Application
- Disable the
Hide collection create and edit controls
setting. - Navigate to
Collections > Users
. - Modify the
users
collection using the gear icon near the title. - Navigate to
Options > OAuth2
. - Enable the Active checkmark, and click
Add provider
- Fill in the required fields with values from Pocket ID:
- Client ID
- Client Secret
- Display Name of your choice (i.e.:
Pocket
) - Auth URL
- Token URL
- Set Fetch user info from to
User info URL
. - Leave
Support PKCE
enabled.
- Save the settings.
- Re-enable
Hide collection create and edit controls
from step 2. - Test the OAuth login to ensure it works.
Disable password login
To disable password login, set DISABLE_PASSWORD_AUTH=true
in the hub environment variables. Changing in the UI alone will see the value overwritten on next restart.
Automatic user creation
Beszel does not allow automatic user creation by default. To enable it, set USER_CREATION=true
in the hub environment variables.