working on sso

.env.sample

@@ -16,3 +16,13 @@ SANDBOX_DOMAIN=sandbox.cryptpad.example.com
 ## Domain aliases
 #EXTRA_DOMAINS=', `www.cryptpad.example.com`'
 LETS_ENCRYPT_ENV=production
+
+## SSO / OIDC (optional — requires SSO_ENABLED=true)
+SSO_ENABLED=false
+SSO_ENFORCED=false
+SSO_PROVIDER_NAME=Authentik
+SSO_OIDC_URL=https://authentik.example.com/application/o/cryptpad
+SSO_CLIENT_ID=cryptpad
+SSO_CLIENT_SECRET=
+SSO_JWT_ALG=RS256
+SSO_PLUGIN_VERSION=0.4.0