Configure Google OAuth
Create a Google OAuth client for a web application so Google can return the user's OpenID profile and email address to Coolify.
Replace the example domain while following this guide:
- Coolify URL:
https://coolify.shadowarcanist.com - Authorized redirect URI:
https://coolify.shadowarcanist.com/auth/google/callback - Hosted domain:
shadowarcanist.com(optional)
Set up Google OAuth
Select a Google Cloud project
Open the Google Auth Platform and select or create the Google Cloud project that will own the OAuth client.
If Google asks you to configure the consent screen, complete Branding, choose the appropriate Audience, and add contact information. For an external app in testing, add every person who will test Coolify as a test user.
Create a web OAuth client
Open Clients, select Create client, and choose Web application as the application type.
Enter a name such as Coolify. Under Authorized redirect URIs, add:
https://coolify.shadowarcanist.com/auth/google/callbackCreate the client.
Save the Google credentials
Copy the generated Client ID and Client secret. You can also download the client JSON, but Coolify only needs these two values.
Configure Google in Coolify
Open Settings > Authentication and find Google.
| Coolify field | Google value |
|---|---|
| Client ID | The Google web client ID. |
| Client Secret | The Google client secret. |
| Redirect URI | https://coolify.shadowarcanist.com/auth/google/callback |
| Hosted domain | Optional allowed Google Workspace domain, such as shadowarcanist.com. Use * for any Workspace domain. |
Select Save, then turn on Enabled for Google.
Coolify enforces the configured Workspace domain. * allows any Google Workspace account, but rejects personal Google accounts. Leave the field empty when you do not need a Workspace restriction.
Verify Google sign-in
Open the Coolify login page in a private browser window and select Login with Google. Complete consent if requested, then confirm that Coolify opens the account matching the Google email address.