diff --git a/.env b/.env
index d6cc62e..86a033e 100644
--- a/.env
+++ b/.env
@@ -7,6 +7,8 @@ DATABASE_URL=postgres://postgres:${DATABASE_PASSWORD}@db/windmill?sslmode=disabl
 # WM_IMAGE=ghcr.io/windmill-labs/windmill-ee:main
 WM_IMAGE=ghcr.io/windmill-labs/windmill:${WM_VERSION}
 
+GOOGLE_OAUTH_CLIENT_ID=976427934311-6oj0l38ptn6ui2hoj37qbs137lcnu6kg.apps.googleusercontent.com
+GOOGLE_OAUTH_CLIENT_SECRET=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
 
 # To use another port than :80, setup the Caddyfile and the caddy section of the docker-compose to your needs: https://caddyserver.com/docs/getting-started
 # To have caddy take care of automatic TLS
diff --git a/docker-compose.yml b/docker-compose.yml
index 382dee1..4fb00a8 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -47,6 +47,10 @@ services:
       - DATABASE_URL=${DATABASE_URL}
       - MODE=server
       - BASE_URL=https://windmill.keinafarm.net
+      - OAUTH_REDIRECT_BASE_URL=https://windmill.keinafarm.net
+      - GOOGLE_OAUTH_ENABLED=true
+      - GOOGLE_OAUTH_CLIENT_ID=${GOOGLE_OAUTH_CLIENT_ID}
+      - GOOGLE_OAUTH_CLIENT_SECRET=${GOOGLE_OAUTH_CLIENT_SECRET}
     depends_on:
       db:
         condition: service_healthy