From 45740a1878b8f741dab5bfb72ecb45162a48381e Mon Sep 17 00:00:00 2001
From: dvirlabs <dvirlabs@gmail.com>
Date: Mon, 30 Jun 2025 05:31:55 +0300
Subject: [PATCH] Try to fix wikijs

---
 manifests/wikijs/values.yaml | 57 ++++++++++++++++++++++++++++++++++++
 1 file changed, 57 insertions(+)

diff --git a/manifests/wikijs/values.yaml b/manifests/wikijs/values.yaml
index 7c6f878..e102940 100644
--- a/manifests/wikijs/values.yaml
+++ b/manifests/wikijs/values.yaml
@@ -43,3 +43,60 @@ env:
 
 nodeSelector:
   node-role.kubernetes.io/worker: "true"
+
+# 🚀 Initial admin registration + groups
+initialSetup:
+  enabled: true
+  defaultEmail: dvirlabs@gmail.com
+  defaultPassword: changeThisNow
+
+# 👥 Auto-create groups with permissions
+initialGroups:
+  - name: wikijs-admins
+    system: false
+    permissions:
+      - pages.view
+      - pages.create
+      - pages.update
+      - pages.delete
+      - administration.access
+      - users.manage
+      - groups.manage
+
+  - name: wikijs-users
+    system: false
+    permissions:
+      - pages.view
+      - pages.create
+      - pages.update
+
+  - name: Guests
+    system: true
+    permissions:
+      - pages.view
+
+# 🔐 Authentication provider (OIDC / Keycloak)
+authentication:
+  oauth2:
+    enabled: true
+    allowSelfRegistration: true
+    autoAssignGroups:
+      - Guests
+    clientId: wikijs
+    clientSecret: <YOUR_CLIENT_SECRET>
+    authorizationEndpoint: https://keycloak.dvirlabs.com/realms/lab/protocol/openid-connect/auth
+    tokenEndpoint: https://keycloak.dvirlabs.com/realms/lab/protocol/openid-connect/token
+    userInfoEndpoint: https://keycloak.dvirlabs.com/realms/lab/protocol/openid-connect/userinfo
+    logoutEndpoint: https://keycloak.dvirlabs.com/realms/lab/protocol/openid-connect/logout
+    scope: openid profile email
+    prompt: auto
+    domainWhitelist:
+      - dvirlabs.com
+    mapGroups:
+      enabled: true
+      claim: groups
+      mappings:
+        - source: wikijs-admins
+          target: wikijs-admins
+        - source: wikijs-users
+          target: wikijs-users