Karakeep

Create the client in Pocket ID

1. In Pocket ID, open Administration → OIDC Clients and click Add OIDC Client.
2. Enter a name such as Karakeep and add the callback URL https://karakeep.example.com/api/auth/callback/custom.
3. Click Create and copy the Client ID, the Client secret and the OIDC Discovery URL. The client secret is only shown once.
4. On the client’s Access tab, select the groups that may sign in under Allowed User Groups, or choose All Users.

Configure Karakeep

1. Open the .env file of your Karakeep compose setup and add these lines:

   OAUTH_WELLKNOWN_URL=https://id.example.com/.well-known/openid-configuration
   OAUTH_CLIENT_SECRET=<client-secret>
   OAUTH_CLIENT_ID=<client-id>
   OAUTH_PROVIDER_NAME="Pocket ID"
   NEXTAUTH_URL=https://karakeep.example.com

2. (Optional) To disable password authentication and link your existing Karakeep account with your Pocket ID identity, also add:

   DISABLE_PASSWORD_AUTH=true
   OAUTH_ALLOW_DANGEROUS_EMAIL_ACCOUNT_LINKING=true