apiVersion: v1
kind: ConfigMap
metadata:
  name: nextcloud-post-install
  namespace: my-apps
data:
  keycloak-post-install.sh: |
    #!/bin/bash
    echo "🔐 Enabling sociallogin app..."
    occ app:install sociallogin || true
    occ app:enable sociallogin

    echo "🔐 Configuring Keycloak OIDC provider..."
    occ sociallogin:custom_oidc keycloak \
      --client-id="nextcloud" \
      --client-secret="$(cat /secrets/keycloak-client-secret)" \
      --issuer-uri="https://keycloak.dvirlabs.com/realms/dvirlabs" \
      --auto-provision 1 \
      --hide-login-form 0 \
      --scope="openid profile email"