From 793846e7f5acba1b77074c33510efdd733c79eb7 Mon Sep 17 00:00:00 2001
From: Akira <akia@keinafarm.com>
Date: Thu, 19 Feb 2026 14:50:31 +0900
Subject: [PATCH] =?UTF-8?q?Google=20OAUTH=E9=96=A2=E9=80=A3?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .env               | 2 ++
 docker-compose.yml | 4 ++++
 2 files changed, 6 insertions(+)

diff --git a/.env b/.env
index d6cc62e..86a033e 100644
--- a/.env
+++ b/.env
@@ -7,6 +7,8 @@ DATABASE_URL=postgres://postgres:${DATABASE_PASSWORD}@db/windmill?sslmode=disabl
 # WM_IMAGE=ghcr.io/windmill-labs/windmill-ee:main
 WM_IMAGE=ghcr.io/windmill-labs/windmill:${WM_VERSION}
 
+GOOGLE_OAUTH_CLIENT_ID=976427934311-6oj0l38ptn6ui2hoj37qbs137lcnu6kg.apps.googleusercontent.com
+GOOGLE_OAUTH_CLIENT_SECRET=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
 
 # To use another port than :80, setup the Caddyfile and the caddy section of the docker-compose to your needs: https://caddyserver.com/docs/getting-started
 # To have caddy take care of automatic TLS
diff --git a/docker-compose.yml b/docker-compose.yml
index 382dee1..4fb00a8 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -47,6 +47,10 @@ services:
       - DATABASE_URL=${DATABASE_URL}
       - MODE=server
       - BASE_URL=https://windmill.keinafarm.net
+      - OAUTH_REDIRECT_BASE_URL=https://windmill.keinafarm.net
+      - GOOGLE_OAUTH_ENABLED=true
+      - GOOGLE_OAUTH_CLIENT_ID=${GOOGLE_OAUTH_CLIENT_ID}
+      - GOOGLE_OAUTH_CLIENT_SECRET=${GOOGLE_OAUTH_CLIENT_SECRET}
     depends_on:
       db:
         condition: service_healthy