OIDC Authelia - Nextcloud

identity_providers:
  oidc:
    hmac_secret: someSecret
    issuer_private_key: |
      -----BEGIN RSA PRIVATE KEY-----
      <<the key content here>>>
      -----END RSA PRIVATE KEY-----
    access_token_lifespan: 1h
    authorize_code_lifespan: 1m
    id_token_lifespan: 1h
    refresh_token_lifespan: 90m
    enable_client_debug_messages: false
    clients:
      - id: nextcloud
        description: Nextcloud
        secret: someTotallyArbitrarySecretHere
        authorization_policy: two_factor
        redirect_uris:
          - https://yourURL/apps/oidc_login/oidc
        scopes:
          - openid
          - groups
          - email
          - profile