working on sso

compose.yml

@@ -4,6 +4,8 @@ version: "3.8"
 services:
   app:
     image: cryptpad/cryptpad:version-2026.2.0
+    entrypoint: ["/bin/bash", "/sso-entrypoint.sh"]
+    command: ["npm", "start"]
     networks:
       - backend
     environment:
@@ -15,6 +17,15 @@ services:
       - "CPAD_HTTP2_DISABLE=true"
       - "CPAD_TRUST_PROXY=1"
       - "CPAD_CONF=/cryptpad/config/config.js"
+      # SSO plugin
+      - SSO_PLUGIN_VERSION
+      - SSO_ENABLED
+      - SSO_ENFORCED
+      - SSO_PROVIDER_NAME
+      - SSO_OIDC_URL
+      - SSO_CLIENT_ID
+      - SSO_CLIENT_SECRET
+      - SSO_JWT_ALG
 
     volumes:
       - cryptpad_blob:/cryptpad/blob
@@ -23,9 +34,15 @@ services:
       - cryptpad_data:/cryptpad/data
       - cryptpad_files:/cryptpad/datastore
       - cryptpad_config:/cryptpad/config/
+      - cryptpad_plugins:/cryptpad/lib/plugins
     configs:
       - source: config_js
         target: /cryptpad/config/config.js
+      - source: sso_entrypoint
+        target: /sso-entrypoint.sh
+        mode: 0755
+      - source: sso_js
+        target: /sso.js.tmpl
 
     deploy:
       restart_policy:
@@ -77,6 +94,7 @@ volumes:
   cryptpad_data:
   cryptpad_files:
   cryptpad_config:
+  cryptpad_plugins:
 
 configs:
   config_js:
@@ -87,3 +105,10 @@ configs:
     name: ${STACK_NAME}_nginx_conf_${NGINX_CONF_VERSION}
     file: nginx.conf.tmpl
     template_driver: golang
+  sso_entrypoint:
+    name: ${STACK_NAME}_sso_entrypoint_${SSO_ENTRYPOINT_VERSION}
+    file: sso-entrypoint.sh
+  sso_js:
+    name: ${STACK_NAME}_sso_js_${SSO_JS_VERSION}
+    file: sso.js.tmpl
+    template_driver: golang