.env.example
Set these on your host before deploying. Each platform has an “Environment Variables” section in the deploy flow.
POPOIDC_ISSUER
Public HTTPS issuer URL. Must exactly equal the `iss` claim and be reachable by relying parties (e.g. octo-sts). Traefik/Dokploy serves…
POPOIDC_SIGNING_JWK
RSA private signing key, as a JWK with a "kid". Generate one with: deno task keygen then paste the single-line JSON here (keep it secret).
POPOIDC_HMAC_SECRET
secret
Secret keying the stateless challenge HMAC. Use a long random string, e.g. openssl rand -base64 48
brew install flyctl && fly launch --from https://github.com/dtinth/popoidc
curl -L https://fly.io/install.sh | sh && fly launch --from https://github.com/dtinth/popoidc
iwr https://fly.io/install.ps1 -useb | iex; fly launch --from https://github.com/dtinth/popoidc