Add Hydra service + migrate (todo §3); pin oryd/hydra:v26.2.0, OAuth2 issuer + login/consent URLs → our app routes

2026-06-17 15:45:37 +02:00
parent fa87280f46
commit 93e62d8661
6 changed files with 114 additions and 3 deletions
--- a/compose.override.yml
+++ b/compose.override.yml
@@ -18,3 +18,10 @@ services:
    ports:
      - "8025:8025"
    restart: unless-stopped
+
+  # Ory Hydra dev: --dev permits the http issuer/redirect URLs; expose the public port
+  # so OAuth2 flows reach the host. Prod (§3 dev/prod split) drops --dev for https.
+  hydra:
+    command: serve all --dev -c /etc/config/hydra/hydra.yml
+    ports:
+      - "4444:4444"