Djeex/docudjeex
1
1
Fork 0
Code Issues Pull Requests Projects Wiki Activity

Add native Pocket ID OIDC tutorials across the app guides

Browse Source
This commit is contained in:
Djeex
2026-09-02 19:28:29 +02:00
parent bb8581a535
commit dd95694492
5 changed files with 214 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files
content/en/3.serveex/6.cloud/2.nextcloud.md
+38 -3
View File
@@ -119,7 +119,7 @@ Redeploy the stack and wait for SWAG to become fully operational.
In Nextcloud’s files, edit the `config.php` file:
::tip{icon=""}
✨ __Tip:__ You can use [File Browser](/serveex/files/file-browser) to navigate and edit files instead of using terminal commands.
✨ __Tip:__ You can use [File Browser Quantum](/serveex/files/file-browser-quantum) to navigate and edit files instead of using terminal commands.
::
```bash [Terminal]
@@ -190,6 +190,41 @@ Press :kbd{value="Ctrl+O"}, then :kbd{value="Enter"} to save, and :kbd{value="Ct
That’s it! You’ve exposed Nextcloud! Don’t forget to install [the desktop and mobile apps](https://nextcloud.com/install/).
::tip{icon=""}
✨ __Tip:__ You can protect this app natively via OIDC with [Pocket ID](/serveex/security/pocket-id) (register it as an OIDC client), or with Authentik by [following these instructions](https://docs.goauthentik.io/integrations/services/nextcloud/).
## Protecting Nextcloud with Pocket ID
Nextcloud can also delegate login to an OIDC provider instead of (or alongside) its own accounts.
::steps{level="3"}
### Install the OpenID Connect app
In Nextcloud, go to _Apps > Integration_ and install __OpenID Connect user backend__ (`user_oidc`).
### Register Nextcloud as an OIDC client
[Register an OIDC client in Pocket ID](/serveex/security/pocket-id#registering-an-oidc-client) named `Nextcloud`, with this callback URL:
```text
https://nextcloud.yourdomain.com/apps/user_oidc/code
```
### Add the provider in Nextcloud
In Nextcloud, go to _Administration > OpenID Connect_, click the `+` button, and fill in:
| Field | Value |
|-------|-------|
| Identifier | `PocketID` |
| Client ID | The client ID copied from Pocket ID |
| Client secret | The client secret copied from Pocket ID |
| Discovery endpoint | Pocket ID's OIDC discovery URL |
| Scope | `openid email profile groups` |
### Done !
::
::tip
✨ You can use [Authentik](/serveex/advanced/authentik) instead of Pocket ID:
1. In Authentik, create an application and an OAuth2/OpenID Connect provider named `Nextcloud`, with a redirect URI (type `Strict`) of `https://nextcloud.yourdomain.com/apps/user_oidc/code`.
2. Note the provider's __Client ID__, __Client Secret__, and __Slug__.
3. In Nextcloud's OpenID Connect settings, set the Discovery endpoint to `https://authentik.yourdomain.com/application/o/<slug>/.well-known/openid-configuration`, then fill in the Client ID and Client Secret.
::