Mealie

Create the client in Pocket ID

1. In Pocket ID, open Administration → OIDC Clients and click Add OIDC Client.
2. Enter a name such as Mealie and add the callback URL https://mealie.example.com/login.
3. Click Create and copy the Client ID, the Client secret and the OIDC Discovery URL. The client secret is only shown once.
4. On the client’s Access tab, select the groups that may sign in under Allowed User Groups, or choose All Users.

Configure Mealie

Add the following to your Docker compose.yaml or .env file for Mealie.

Example directly in compose.yaml:

environment:
  ALLOW_SIGNUP: 'true'
  #   LOG_LEVEL: "DEBUG"
  #   DB_ENGINE: sqlite # Optional: 'sqlite', 'postgres'
  OIDC_AUTH_ENABLED: True
  OIDC_SIGNUP_ENABLED: True
  OIDC_CONFIGURATION_URL: https://id.example.com/.well-known/openid-configuration
  OIDC_CLIENT_ID: <client-id>
  OIDC_CLIENT_SECRET: <client-secret>

Example using an .env file:

  OIDC_AUTH_ENABLED=true
  OIDC_SIGNUP_ENABLED=true
  OIDC_CLIENT_ID=<client-id>
  OIDC_CLIENT_SECRET=<client-secret>
  OIDC_PROVIDER_NAME="Pocket ID"
  OIDC_CONFIGURATION_URL=https://id.example.com/.well-known/openid-configuration

  # Optionally, uncomment  the following:
# ALLOW_SIGNUP=false # Disables Mealie's public/local account registration. Users cannot create accounts through Mealie's standard signup form.
# OIDC_SIGNUP_ENABLED=true # Allows Mealie to create an account automatically when an authorized Pocket ID user signs in for the first time.
# ALLOW_PASSWORD_LOGIN=false # Disables Mealie's local username and password login form. Authentication must occur through Pocket ID.
# OIDC_AUTO_REDIRECT=true # Bypasses Mealie's login selection page and redirect visitors directly to Pocket ID for authentication.

If you are using an .env file, reference it in your compose.yaml under the mealie service:

env_file:
  - .env