A couple of deployment questions

[Misha-133]

So, after a recent update (thanks for the #1295 btw), I was able to successfully (to some extent) deploy docs using docker and integrate it with my existing infra (Active Directory domain with ADFS as OIDC provider, truenas core with built in Minio instance).
But after trying to actually use the project i stumbled upon a few issues i'm actually not sure how to work around.

1. I was a bit surprise to find out that ADFS only returns the sub value on the userinfo OIDC endpoint. No name, nothing, and appaerently this behavior cannot be altered.
   After some researching I found out that I can add custom claims to the id_token value, but if I understand this correctly, Docs doesn't support mapping values from the id_token to user properties (email, short_name or full_name).
   I'm wondering if this may get implemented in the future, so Docs would be able to properly work with ADFS. Right now i'm stuck with having no nickname nor email assigned to my Docs user account.
   Apparently I had some misunderstanding of how ADFS works.. it's not really possible to achieve what I want, so I'm probably just gonna use keycloak with active directory as the user database in read only mode

2. giving up on getting usernames working, I started testing Docs functionality.
   The issue for me is that I can't seems to get media working (images, videos). Docs is able to successfully upload ones to the S3 bucket hosted on my Truenas instance with help of Minio. But the URLs it puts in the markdown just return 404.
   Example of the url:

https://docs.domain.com/media/25d8865f-ceea-4a7d-acfb-c26c9349f00f/attachments/bc4178b9-f696-4287-9b44-59076218cdf9.png

I'm not exactly sure if this means something is wrong with my reverse proxy setup or configuration.
I ended up setting the reverse proxy configuration myself, as I couldn't really use the one from the examples as it conflicted with my exisitng setup.
So I'm trying to figure out if I have to proxy the media url to frontend or backend containers. Or directly to the minio instance. I'm really not sure on this, so i'd greatly appreciate someone more experienced leave some input.

Thanks in advance.

[Misha-133]

So after doing some research & tinkering with it - i guess the answer to the second question is "you have to proxy it yourself", which is fine, but imho should be a bit better documented.
Still leaves the first question though. nvm, I had some misunderstanding how ADFS works.

[virgile-dev]

Hey @Misha-133 !
Glad you found your answer. We're open for a PR that documents it better if you have time.
Cheers !