OIDC: Giving a user admin rights wipes their OIDC binding #1009

networks:
  proxy:
    external: true

services:
  gotify:
    image: ghcr.io/gotify/server
    container_name: gotify
    restart: unless-stopped
    networks:
      - proxy
    environment:
      - TZ=${TZ}
      - GOTIFY_SERVER_TRUSTEDPROXIES=127.0.0.1/32,::1
      - GOTIFY_SERVER_SECURECOOKIE=true
      - GOTIFY_OIDC_ENABLED=true
      - GOTIFY_OIDC_ISSUER=https://authelia-vps.${DOMAIN_1_NAME}.${DOMAIN_1_TLD_1}
      - GOTIFY_OIDC_CLIENTID=gotify
      - GOTIFY_OIDC_CLIENTSECRET=${GOTIFY_OIDC_CLIENTSECRET}
      - GOTIFY_OIDC_REDIRECTURL=https://gotify.${DOMAIN_1_NAME}.${DOMAIN_1_TLD_1}/auth/oidc/callback
      - GOTIFY_OIDC_AUTOREGISTER=true
      - GOTIFY_OIDC_LINK_BY_USERNAME=false
      - GOTIFY_OIDC_USERNAMECLAIM=preferred_username
      - GOTIFY_OIDC_SCOPES=openid,profile,email
    volumes:
      - ./data:/app/data
    labels:
      - traefik.enable=true
      - traefik.http.routers.gotify.entrypoints=internal-secure
      - traefik.http.routers.gotify.middlewares=secure-headers@file
      - traefik.http.routers.gotify.rule=Host(`gotify.${DOMAIN_1_NAME}.${DOMAIN_1_TLD_1}`)
      - traefik.http.services.gotify.loadbalancer.server.port=80
      - traefik.http.services.gotify.loadbalancer.server.scheme=http