root/ubuntu-post-install
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix wrong Beszel OAuth2 navigation instructions

Browse Source 
Printed "hub Settings -> Auth providers", which doesn't exist. The real
location is PocketBase's own admin panel underneath the hub
(/_/#/settings -> unhide collection edit controls -> edit the "users"
collection -> Options tab -> OAuth2), confirmed against beszel.dev's
OAuth guide directly. Fixed in both beszel.sh's own offer and authelia.sh's
generic OIDC menu preset.
This commit is contained in:
Claude
2026-08-25 13:25:03 +00:00
parent 7209a32d43
commit e9286c8360
2 changed files with 18 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
services/authelia.sh
+9 -3
View File
@@ -3200,14 +3200,20 @@ _authelia_add_oidc_client() {
echo "" echo ""
;; ;;
6) 6)
echo " Beszel is PocketBase-based — its OAuth2 provider is a PocketBase admin" echo " Beszel is PocketBase-based — its OAuth2 provider lives in PocketBase's"
echo " setting, not an API this script can write (checked against beszel.dev's" echo " own admin panel underneath the hub, not the hub's own Settings page and"
echo " own docs). In the hub: Settings -> Auth providers -> OpenID Connect:" echo " not an API this script can write (checked against beszel.dev's own docs):"
echo " 1) https://<your-beszel-domain>/_/#/settings -> toggle OFF \"Hide"
echo " collection create and edit controls\""
echo " 2) Collections -> edit the \"users\" collection"
echo " 3) Options tab -> enable OAuth2 -> Add provider, fill in:"
echo " Client ID: ${CLIENT_ID}" echo " Client ID: ${CLIENT_ID}"
echo " Client Secret: ${CLIENT_SECRET_PLAIN}" echo " Client Secret: ${CLIENT_SECRET_PLAIN}"
echo " Auth URL: https://${AUTHELIA_PORTAL_DOMAIN}/api/oidc/authorization" echo " Auth URL: https://${AUTHELIA_PORTAL_DOMAIN}/api/oidc/authorization"
echo " Token URL: https://${AUTHELIA_PORTAL_DOMAIN}/api/oidc/token" echo " Token URL: https://${AUTHELIA_PORTAL_DOMAIN}/api/oidc/token"
echo " User Info URL: https://${AUTHELIA_PORTAL_DOMAIN}/api/oidc/userinfo" echo " User Info URL: https://${AUTHELIA_PORTAL_DOMAIN}/api/oidc/userinfo"
echo " 4) Save, then toggle \"Hide collection create and edit controls\" back"
echo " ON — leaving it off is its own exposure once you're done"
echo " Register your first Beszel account with a password BEFORE touching" echo " Register your first Beszel account with a password BEFORE touching"
echo " DISABLE_PASSWORD_AUTH/USER_CREATION in its .env — flipping those before" echo " DISABLE_PASSWORD_AUTH/USER_CREATION in its .env — flipping those before"
echo " a working login exists risks locking the hub's UI out entirely." echo " a working login exists risks locking the hub's UI out entirely."
services/beszel.sh
+9 -1
View File
@@ -288,12 +288,20 @@ _beszel_offer_authelia_oidc() {
fi fi
echo "" echo ""
echo " In the hub: Settings -> Auth providers -> OpenID Connect:" echo " This lives in PocketBase's own admin panel underneath the hub, not the"
echo " hub's own Settings page — checked against beszel.dev's OAuth guide"
echo " directly, exact steps:"
echo " 1) Go to https://<your-beszel-domain>/_/#/settings and toggle OFF"
echo " \"Hide collection create and edit controls\""
echo " 2) Go to Collections, edit the \"users\" collection"
echo " 3) Options tab -> enable OAuth2 -> Add provider, fill in:"
echo " Client ID: beszel" echo " Client ID: beszel"
echo " Client Secret: $OIDC_CLIENT_SECRET_PLAIN" echo " Client Secret: $OIDC_CLIENT_SECRET_PLAIN"
echo " Auth URL: ${OIDC_AUTHELIA_PORTAL_URL}/api/oidc/authorization" echo " Auth URL: ${OIDC_AUTHELIA_PORTAL_URL}/api/oidc/authorization"
echo " Token URL: ${OIDC_AUTHELIA_PORTAL_URL}/api/oidc/token" echo " Token URL: ${OIDC_AUTHELIA_PORTAL_URL}/api/oidc/token"
echo " User Info URL: ${OIDC_AUTHELIA_PORTAL_URL}/api/oidc/userinfo" echo " User Info URL: ${OIDC_AUTHELIA_PORTAL_URL}/api/oidc/userinfo"
echo " 4) Save, then toggle \"Hide collection create and edit controls\" back ON"
echo " at /_/#/settings — leaving it off is its own exposure once you're done"
echo "" echo ""
log_warning "The Client Secret above is shown once — save it now." log_warning "The Client Secret above is shown once — save it now."