From 1b0278088141f0b7f120b62ddf32b91d29763c9a Mon Sep 17 00:00:00 2001
From: mahmood <mahmood5221lotfi@gmail.com>
Date: Wed, 7 Oct 2026 22:02:53 +0330
Subject: [PATCH] add ennv need in server for iam?

---
 docker-compose.yml | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)

diff --git a/docker-compose.yml b/docker-compose.yml
index 6b8cda9..e85da23 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -50,6 +50,28 @@ services:
       # Admin mobiles told when a customer completes their profile (D22).
       # Blank = nobody is notified; the upload still succeeds.
       - PROFILE_ADMIN_MOBILES=${PROFILE_ADMIN_MOBILES:-}
+      # Central IAM. Read at process start from this container only.
+      # Frontends compute callback URLs from the browser origin, so these
+      # never belong in a Vite build. Blank stays off (env.ts treats "").
+      - IAM_ENABLED=${IAM_ENABLED:-}
+      - IAM_ISSUER=${IAM_ISSUER:-}
+      - IAM_CLIENT_ID=${IAM_CLIENT_ID:-}
+      - IAM_CLIENT_SECRET=${IAM_CLIENT_SECRET:-}
+      - IAM_TENANT_ID=${IAM_TENANT_ID:-}
+      - IAM_TENANT_SLUG=${IAM_TENANT_SLUG:-}
+      - IAM_LOGIN_DELEGATION=${IAM_LOGIN_DELEGATION:-}
+      - IAM_HTTP_TIMEOUT_MS=${IAM_HTTP_TIMEOUT_MS:-}
+      - IAM_REDIRECT_URI=${IAM_REDIRECT_URI:-}
+      - IAM_REDIRECT_URIS=${IAM_REDIRECT_URIS:-}
+      - IAM_BROWSER_RETURN_URL=${IAM_BROWSER_RETURN_URL:-}
+      - IAM_POST_LOGOUT_REDIRECT_URI=${IAM_POST_LOGOUT_REDIRECT_URI:-}
+      - IAM_ALLOWED_RETURN_URLS=${IAM_ALLOWED_RETURN_URLS:-}
+      - IAM_ADMIN_REDIRECT_URI=${IAM_ADMIN_REDIRECT_URI:-}
+      - IAM_ADMIN_REDIRECT_URIS=${IAM_ADMIN_REDIRECT_URIS:-}
+      - IAM_ADMIN_BROWSER_RETURN_URL=${IAM_ADMIN_BROWSER_RETURN_URL:-}
+      - IAM_ADMIN_POST_LOGOUT_REDIRECT_URI=${IAM_ADMIN_POST_LOGOUT_REDIRECT_URI:-}
+      - IAM_ADMIN_ALLOWED_RETURN_URLS=${IAM_ADMIN_ALLOWED_RETURN_URLS:-}
+      - AUTH_SESSION_TRACKING=${AUTH_SESSION_TRACKING:-}
     # No host ports — Dokploy/Traefik routes by domain to container port 3000
     expose:
       - "3000"