Beszel

Requirements

• Beszel server
• HTTPS connection to your Beszel server

Create the client in Pocket ID

1. In Pocket ID, open Administration → OIDC Clients and click Add OIDC Client.
2. Enter a name such as Beszel and add the callback URL https://beszel.example.com/api/oauth2-redirect.
3. Click Create and copy the Client ID and the Client secret. Under Show more details, also copy the Authorization URL, the Token URL and the Userinfo URL. The client secret is only shown once.
4. On the client’s Access tab, select the groups that may sign in under Allowed User Groups, or choose All Users.

Verify emails in Pocket ID

1. In Pocket ID, open Administration → Application Configuration → Email and turn on Emails verified by default.
2. Open Administration → Users and select the user account. Make sure the email address is marked as verified. If the icon next to the email isn’t green, click it to mark the email as verified.

Note

Beszel requires the OAuth provider to return a valid, verified email address to create new users. If you see an error like Failed to create record. { "email": "cannot be blank" }, your OAuth provider isn’t returning a usable email. Make sure Emails verified by default is turned on in Pocket ID, or that your identity provider returns a verified email in its userinfo response.

Configure Beszel

1. Open the Beszel superuser interface (/_/#/settings) and go to Settings → Application.
2. Turn off Hide collection create and edit controls.
3. Go to Collections → Users.
4. Edit the users collection with the gear icon next to the title.
5. Go to Options → OAuth2.
6. Select Active and click Add provider.
7. Select the oidc provider.
8. Fill in the fields with the values from Pocket ID:
   • Client ID: the Client ID from Pocket ID.
   • Client Secret: the Client secret from Pocket ID.
   • Display Name: a name of your choice, such as Pocket.
   • Auth URL: the Authorization URL from Pocket ID.
   • Token URL: the Token URL from Pocket ID.
   • Fetch user info from: User info URL, then enter the Userinfo URL from Pocket ID.
   • Leave Support PKCE turned on.
9. Save the settings.
10. Turn Hide collection create and edit controls from step 2 back on, then sign in with Pocket ID to test it.

Disable password login

To disable password login, set DISABLE_PASSWORD_AUTH=true in the hub environment variables. If you only change it in the UI, the value is overwritten on the next restart.

Automatic user creation

Beszel doesn’t allow automatic user creation by default. To enable it, set USER_CREATION=true in the hub environment variables.

Sources

Beszel Configuration Guide