The request fails due to a missing, invalid, or mismatching redirection URI (redirect_uri).

services:
  postgres:
    image: postgres:15
    restart: unless-stopped
    environment:
      - POSTGRES_PASSWORD=longpassword
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -d postgres -U postgres"]
      start_period: 20s
      interval: 30s
      retries: 5
      timeout: 5s
    volumes:
      - /etc/localtime:/etc/localtime:ro
      - ./postgres/15/data:/var/lib/postgresql/data
    networks:
      - freshrss

  freshrss:
    image: freshrss/freshrss
    depends_on:
      postgres:
        condition: service_healthy
    environment:
      - TZ=Europe/Paris
      - CRON_MIN=0,10,20,30,40,50
      - OIDC_ENABLED=1
      - OIDC_PROVIDER_METADATA_URL=https://myauthentik.tld/application/o/freshrss/.well-known/openid-configuration
      - OIDC_CLIENT_ID=client_id
      - OIDC_CLIENT_SECRET=client_secret
      - OIDC_X_FORWARDED_HEADERS=X-Forwarded-Port X-Forwarded-Proto X-Forwarded-Host
      - OIDC_SCOPES=openid email profile 

    volumes:
      - ./freshrss/data:/var/www/FreshRSS/data
      - ./freshrss/extensions:/var/www/FreshRSS/extensions
    restart: unless-stopped
    labels:
      - traefik.enable=true
      - traefik.http.routers.freshrss.rule=Host(`mydomain.tld`)
    networks:
      - web
      - freshrss

networks:
  web:
    name: web
    external: true
  freshrss: