docs: suggest disabling the default GitHub OAuth2 provider on k8s (#16758)

For production deployments we recommend disabling the default GitHub OAuth2 app managed by Coder. This PR mentions it in k8s installation docs and the helm README so users can stumble upon it more easily.
2025-03-03 12:32:27 +01:00
parent a5842e5ad1
commit 9c5d4966ee
2 changed files with 8 additions and 0 deletions
@@ -47,6 +47,10 @@ coder:
    # This env enables the Prometheus metrics endpoint.
    - name: CODER_PROMETHEUS_ADDRESS
      value: "0.0.0.0:2112"
+    # For production deployments, we recommend configuring your own GitHub
+    # OAuth2 provider and disabling the default one.
+    - name: CODER_OAUTH2_GITHUB_DEFAULT_PROVIDER_ENABLE
+      value: "false"
  tls:
    secretNames:
      - my-tls-secret-name