From 89a5d04c42ac88e1a22c45f8722f25ecce4fd088 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Beatrice=20Dellac=C3=A0?= <hello@beatrice.wtf>
Date: Mon, 2 Jun 2025 01:02:23 +0200
Subject: [PATCH] update saml

---
 deploy/appflowy/deployment.yaml | 7 +++++++
 deploy/appflowy/secret.yaml     | 1 +
 2 files changed, 8 insertions(+)

diff --git a/deploy/appflowy/deployment.yaml b/deploy/appflowy/deployment.yaml
index 49af7a2..f358bfd 100644
--- a/deploy/appflowy/deployment.yaml
+++ b/deploy/appflowy/deployment.yaml
@@ -19,6 +19,13 @@ spec:
           ports:
             - containerPort: 9999
           env:
+            - name: GOTRUE_SAML_ENABLED
+              value: "true"
+            - name: GOTRUE_SAML_PRIVATE_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: appflowy-secrets
+                  key: GOTRUE_SAML_PRIVATE_KEY
             # ----- DB (Postgres HA) -----
             - name: GOTRUE_DB_DRIVER
               value: postgres
diff --git a/deploy/appflowy/secret.yaml b/deploy/appflowy/secret.yaml
index 80d0d81..8326098 100644
--- a/deploy/appflowy/secret.yaml
+++ b/deploy/appflowy/secret.yaml
@@ -16,6 +16,7 @@ stringData:
   # ==== GoTrue (Auth) keys ====
   GOTRUE_JWT_SECRET: "5IqQzMmpRPoeParMsgoWIphrCYdhFhxz9NSyEQYlwGyTrRSsjInyMSaM44ZCH"
   GOTRUE_ADMIN_PASSWORD: "KaTPKUXiDUVIcUYWjqSy5SFdqrIl5csS"
+  GOTRUE_SAML_PRIVATE_KEY: "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"
 
   # ==== Minio (S3) ====
   APPFLOWY_S3_MINIO_URL: "https://s3.minio.panic.haus"