#!/bin/bash
echo "🔐 Enabling sociallogin app..."
occ app:install sociallogin || true
occ app:enable sociallogin

echo "🔐 Configuring Keycloak OIDC provider..."
occ sociallogin:custom_oidc keycloak \
  --client-id="nextcloud" \
  --client-secret="$(cat /secrets/keycloak-client-secret)" \
  --issuer-uri="https://keycloak.dvirlabs.com/realms/dvirlabs" \
  --auto-provision 1 \
  --hide-login-form 0 \
  --scope="openid profile email"