docs: clarify Logto proxy setup and ENDPOINT/ADMIN_ENDPOINT semantics
LOGTO_ENDPOINT and LOGTO_ADMIN_ENDPOINT are public-facing URLs that Logto uses for OIDC discovery, issuer URI, and redirects. When behind a reverse proxy (e.g., Traefik), set these to the external URLs. Logto requires its own subdomain (not a path prefix). Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
@@ -264,9 +264,11 @@ When `CAMELEER_OIDC_ISSUER_URI` is configured, the server accepts external acces
|
||||
|
||||
| Variable | Purpose |
|
||||
|----------|---------|
|
||||
| `CAMELEER_OIDC_ISSUER_URI` | OIDC issuer URI for JWKS discovery |
|
||||
| `CAMELEER_OIDC_ISSUER_URI` | OIDC issuer URI for JWKS discovery (e.g., `https://auth.example.com/oidc`) |
|
||||
| `CAMELEER_OIDC_AUDIENCE` | Expected audience (API resource indicator) |
|
||||
|
||||
Logto is proxy-aware (`TRUST_PROXY_HEADER=1`). The `LOGTO_ENDPOINT` env var sets the public-facing URL used in OIDC discovery, issuer URI, and redirect URLs. Logto requires its own subdomain (not a path prefix).
|
||||
|
||||
---
|
||||
|
||||
## Admin API
|
||||
|
||||
Reference in New Issue
Block a user