From 969d16b3baeba5acafcbdf0ba16f82c2383d3c98 Mon Sep 17 00:00:00 2001
From: Georges-Antoine Assi <contact@me.gantoine.com>
Date: Wed, 1 Jan 2025 13:35:08 -0500
Subject: [PATCH] Add new env to config

---
 backend/config/__init__.py |  1 +
 env.template               | 11 ++++++++---
 2 files changed, 9 insertions(+), 3 deletions(-)

diff --git a/backend/config/__init__.py b/backend/config/__init__.py
index 7a5860b2d..a5230e54a 100644
--- a/backend/config/__init__.py
+++ b/backend/config/__init__.py
@@ -73,6 +73,7 @@ DISABLE_CSRF_PROTECTION = str_to_bool(
 DISABLE_DOWNLOAD_ENDPOINT_AUTH = str_to_bool(
     os.environ.get("DISABLE_DOWNLOAD_ENDPOINT_AUTH", "false")
 )
+DISABLE_USERPASS_LOGIN = str_to_bool(os.environ.get("DISABLE_USERPASS_LOGIN", "false"))
 
 # OIDC
 OIDC_ENABLED: Final = str_to_bool(os.environ.get("OIDC_ENABLED", "false"))
diff --git a/env.template b/env.template
index ad2075084..31fe2683d 100644
--- a/env.template
+++ b/env.template
@@ -35,6 +35,14 @@ AUTHENTIK_BOOTSTRAP_PASSWORD=
 
 # Authentication
 ROMM_AUTH_SECRET_KEY=
+# Disable auth on download endpoint for 3rd party support
+DISABLE_DOWNLOAD_ENDPOINT_AUTH=
+# Disable CSRF protection for development and testing purposes
+DISABLE_CSRF_PROTECTION=
+# Disable username + passsword login when using OIDC login
+DISABLE_USERPASS_LOGIN=
+
+# OpenID Connect (Authentik, Authelia, etc.)
 OIDC_ENABLED=
 OIDC_PROVIDER=
 OIDC_CLIENT_ID=
@@ -56,8 +64,5 @@ SCHEDULED_UPDATE_SWITCH_TITLEDB_CRON=0 4 * * *
 DISABLE_EMULATOR_JS=false
 DISABLE_RUFFLE_RS=false
 
-# Disable CSRF protection for development and testing purposes
-DISABLE_CSRF_PROTECTION=true
-
 # Logging
 LOGLEVEL=DEBUG