KaraKeep

Configure KaraKeep with Pocket ID authentication

In Pocket-ID create a new OIDC Client, name it i.e. Karakeep
Set the callback url to: https://<your-karakeep-subdomain>.<your-domain>/api/auth/callback/custom, or leave blank to autofill on first login.
Open your .env file from your Karakeep compose and add these lines:

OAUTH_WELLKNOWN_URL=https://<your-pocket-id-subdomain>.<your-domain>/.well-known/openid-configuration
OAUTH_CLIENT_SECRET=<client secret from the created OIDC client>
OAUTH_CLIENT_ID=<client id from the created OIDC client>
OAUTH_PROVIDER_NAME=Pocket-ID
NEXTAUTH_URL=https://<your-karakeep-subdomain>.<your-domain>

Optional: If you like to disable password authentication and link your existing Karakeep account with your Pocket-ID identity.

DISABLE_PASSWORD_AUTH=true
OAUTH_ALLOW_DANGEROUS_EMAIL_ACCOUNT_LINKING=true