OpenID Connect with Azure Entra ID

[dauphinpasdroit]

Hello,

I'm trying to deploy SFTPGo, behind Nginx Proxy Manager as a reverse proxy using docker compose file.

Here is the docker compose file:

services:
  sftpgo:
    image: "drakkan/sftpgo:v2.6"
    restart: unless-stopped
    expose:
      - "8080"
      - "5007"
    environment:
      SFTPGO_WEBDAVD__BINDINGS__0__PORT: 5007
      SFTPGO_DATA__PROVIDER__DRIVER: "mysql"
      SFTPGO_DATA__PROVIDER__NAME: "sftpgo"
      SFTPGO_DATA__PROVIDER__HOST: "mysql"
      SFTPGO_DATA__PROVIDER__PORT: 3306
      SFTPGO_DATA__PROVIDER__USERNAME: "${SQL_USERNAME}"
      SFTPGO_DATA__PROVIDER__PASSWORD: "${SQL_PASSWORD}"
      SFTPGO_HTTPD__BINDINGS__0__OIDC__CLIENT_ID: "${client_id}"
      SFTPGO_HTTPD__BINDINGS__0__OIDC__CLIENT_SECRET: "${client_secret}"
      SFTPGO_HTTPD__BINDINGS__0__OIDC__CONFIG_URL: "https://login.microsoftonline.com/{{ tenant_id }}/.well-known/openid-configuration"
      SFTPGO_HTTPD__BINDINGS__0__OIDC__REDIRECT_BASE_URL: "https://sfptgo.mydomain.app"
      SFTPGO_HTTPD__BINDINGS__0__OIDC__USERNAME_FIELD: "preferred_username"
    volumes:
      - ./:/srv/sftpgo
  mysql:
    image: mysql:latest
    restart: always
    environment:
      MYSQL_DATABASE: "sftpgo"
      MYSQL_USER: "${SQL_USERNAME}"
      MYSQL_PASSWORD: "${SQL_PASSWORD}"
      MYSQL_ROOT_PASSWORD: "${SQL_ROOT_PASSWORD}"
    volumes:
      - ./database:/var/lib/mysql

  npm:
    image: 'jc21/nginx-proxy-manager:latest'
    restart: unless-stopped
    ports:
      - '80:80' # Public HTTP Port
      - '443:443' # Public HTTPS Port
      - '81:81' # Admin Web Port

    volumes:
      - ./data:/data
      - ./letsencrypt:/etc/letsencrypt

The fact is that I can't start the container as I always get the error:

{"level":"error","time":"2025-01-24T14:16:41.318","sender":"service","message":"could not start HTTP server: oidc: unable to initialize provider for URL \"https://login.microsoftonline.com/{{ tenant_id }}/.well-known/openid-configuration\": 404 Not Found: "}

I can't understand why, as, if I curl the address myself, I don't received a 404, I receive a 200.

Thank you for your help