From 38be6c13f76e893cf47636257071b440dec0c5b2 Mon Sep 17 00:00:00 2001
From: Robert Günzler <r@gnzler.io>
Date: Sun, 7 Sep 2025 17:32:13 +0200
Subject: initial commit
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Robert Günzler <r@gnzler.io>
---
 bundles/jellyfin/files/SSO-Auth.xml | 71 +++++++++++++++++++++++++++++++++++++
 1 file changed, 71 insertions(+)
 create mode 100644 bundles/jellyfin/files/SSO-Auth.xml

(limited to 'bundles/jellyfin/files/SSO-Auth.xml')

diff --git a/bundles/jellyfin/files/SSO-Auth.xml b/bundles/jellyfin/files/SSO-Auth.xml
new file mode 100644
index 0000000..50dfdc8
--- /dev/null
+++ b/bundles/jellyfin/files/SSO-Auth.xml
@@ -0,0 +1,71 @@
+<?xml version="1.0" encoding="utf-8"?>
+<PluginConfiguration xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema">
+  <SamlConfigs />
+  <OidConfigs>
+    <item>
+      <key>
+        <string>authelia</string>
+      </key>
+      <value>
+        <PluginConfiguration>
+          <OidEndpoint>https://login.gzr.im</OidEndpoint>
+          <OidClientId>jellyfin</OidClientId>
+          <OidSecret>${repo.vault.cmd(f"rbw get authelia/client/jellyfin")}</OidSecret>
+          <Enabled>true</Enabled>
+          <EnableAuthorization>true</EnableAuthorization>
+          <EnableAllFolders>false</EnableAllFolders>
+          <EnabledFolders>
+            <string>f137a2dd21bbc1b99aa5c0f6bf02a805</string>
+            <string>a656b907eb3a73532e40e44b968d0225</string>
+          </EnabledFolders>
+          <AdminRoles>
+            <string>admins</string>
+          </AdminRoles>
+          <Roles>
+            <string>jellyfin</string>
+          </Roles>
+          <EnableFolderRoles>true</EnableFolderRoles>
+          <EnableLiveTvRoles>false</EnableLiveTvRoles>
+          <EnableLiveTv>false</EnableLiveTv>
+          <EnableLiveTvManagement>false</EnableLiveTvManagement>
+          <LiveTvRoles />
+          <LiveTvManagementRoles />
+          <FolderRoleMappings>
+            <FolderRoleMappings>
+              <Role>jellyfin</Role>
+              <Folders>
+                <string>f137a2dd21bbc1b99aa5c0f6bf02a805</string>
+                <string>a656b907eb3a73532e40e44b968d0225</string>
+              </Folders>
+            </FolderRoleMappings>
+            <FolderRoleMappings>
+              <Role>jellyfin-anime</Role>
+              <Folders>
+                <string>abebc196cc1b8bbf6f8bb5ca7b5ad6f1</string>
+                <string>29391378c4118b35b77f84980d25f0a6</string>
+              </Folders>
+            </FolderRoleMappings>
+            <FolderRoleMappings>
+              <Role>jellyfin-misc</Role>
+              <Folders>
+                <string>a1bc8a1aac164cd3d91bf3f4252f92f4</string>
+              </Folders>
+            </FolderRoleMappings>
+          </FolderRoleMappings>
+          <RoleClaim>groups</RoleClaim>
+          <OidScopes>
+            <string>groups</string>
+          </OidScopes>
+          <DefaultProvider>authelia</DefaultProvider>
+          <SchemeOverride>https</SchemeOverride>
+          <NewPath>true</NewPath>
+          <CanonicalLinks />
+          <DisableHttps>false</DisableHttps>
+          <DisablePushedAuthorization>false</DisablePushedAuthorization>
+          <DoNotValidateEndpoints>false</DoNotValidateEndpoints>
+          <DoNotValidateIssuerName>false</DoNotValidateIssuerName>
+        </PluginConfiguration>
+      </value>
+    </item>
+  </OidConfigs>
+</PluginConfiguration>
-- 
cgit 1.4.1