ImmichI
Immich11mo ago
Ouguiya

Error in OAuth discovery: Error: self-signed certificate

Hi. I hope no one asked this before - I used google and searched in here, but couldn't find much.
I recently tried to setup Authentik to act as an SSO provider for Immich (internally, in my own network). Authentik and Immich are both run through docker, but on separate VMs and subnets.
Filled out everything according to https://docs.goauthentik.io/integrations/services/immich/ and https://immich.app/docs/administration/oauth/.
When I try to login, however, I get an error message saying Error in OAuth discovery: Error: self-signed certificate (Immich Server Error). Since nobody else on the internet seems to be having this problem, I'm guessing it's something seriously stupid that I forgot to do or add, but for the life of me I can't figure out what. The relevant Docker log entry is:
[Nest] 16  - 01/31/2025, 8:36:41 PM   ERROR [Api:OAuthRepository~drpbutwq] Error in OAuth discovery: Error: self-signed certificate
[Nest] 16  - 01/31/2025, 8:36:41 PM   ERROR [Api:OAuthRepository~drpbutwq] Error: self-signed certificate
    at TLSSocket.onConnectSecure (node:_tls_wrap:1679:34)
    at TLSSocket.emit (node:events:524:28)
    at TLSSocket._finishInit (node:_tls_wrap:1078:8)
    at ssl.onhandshakedone (node:_tls_wrap:864:12)
    at TLSWrap.callbackTrampoline (node:internal/async_hooks:130:17)

Docker-compose & .env are attached. For Authentik, the docker-compose file is the default one. Configurations of both immich and authentik are attached (with just the secret removed)
Was this page helpful?