From bb2e51cd0af956b7ce623ece81387edf19ec1359 Mon Sep 17 00:00:00 2001
From: Simon Franken <mail@simon-franken.de>
Date: Thu, 19 Feb 2026 18:47:19 +0100
Subject: [PATCH] Add JWT_SECRET and OIDC iOS redirect vars to env template

---
 .env.docker.template | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.env.docker.template b/.env.docker.template
index 7f790d8..a8ec6e4 100644
--- a/.env.docker.template
+++ b/.env.docker.template
@@ -1,5 +1,10 @@
 APP_URL=
 OIDC_ISSUER_URL=
 OIDC_CLIENT_ID=
+OIDC_REDIRECT_URI=
+OIDC_IOS_REDIRECT_URI=timetracker://oauth/callback
 SESSION_SECRET=
+# Optional: dedicated signing secret for backend-issued JWTs (iOS auth).
+# Falls back to SESSION_SECRET if not set.
+JWT_SECRET=
 API_URL=
\ No newline at end of file