From 1000a61ce14981ea5bbc7986d9b692e21d0be635 Mon Sep 17 00:00:00 2001
From: dish <pyrox@pyrox.dev>
Date: Thu, 11 Jun 2026 22:47:01 -0400
Subject: [PATCH] [marvin] update immich oidc

---
 hosts/marvin/services/immich-config.json | 1 -
 hosts/marvin/services/immich.nix         | 3 ++-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/hosts/marvin/services/immich-config.json b/hosts/marvin/services/immich-config.json
index cfeb5fe4..f72636aa 100644
--- a/hosts/marvin/services/immich-config.json
+++ b/hosts/marvin/services/immich-config.json
@@ -184,7 +184,6 @@
     "autoLaunch": false,
     "autoRegister": true,
     "buttonText": "Login with dishNet",
-    "clientId": "dishNetphotos",
     "defaultStorageQuota": null,
     "enabled": true,
     "issuerUrl": "https://auth.pyrox.dev/oidc/.well-known/openid-configuration",
diff --git a/hosts/marvin/services/immich.nix b/hosts/marvin/services/immich.nix
index acfa4382..f1ba3543 100644
--- a/hosts/marvin/services/immich.nix
+++ b/hosts/marvin/services/immich.nix
@@ -11,7 +11,7 @@ in
 {
   dish.oidcClients = [
     {
-      clientId = "dishNetphotos";
+      clientId = d.oidcId;
       displayName = "dishNet Photos";
       homepageUrl = "https://${d.extUrl}";
       authMethod = "client_secret_post";
@@ -33,6 +33,7 @@ in
       accelerationDevices = [ "/dev/dri/renderD128" ];
       settings = lib.recursiveUpdate (builtins.fromJSON (builtins.readFile ./immich-config.json)) {
         oauth.clientSecret._secret = config.age.secrets.immich-oidc-secret.path;
+        oauth.clientId = d.oidcId;
         notifications.smtp.transport.password._secret = config.age.secrets.immich-mail-pw.path;
         server.externalDomain = "https://${d.extUrl}";
       };
-- 
2.51.2