Jellyseerr OIDC with Pocket ID on Proxmox

A few people on Reddit asked how I set up OIDC in Jellyseerr, so I figured I’d write it up properly. The short answer: you have to build it from source using an OIDC preview branch, because the stable release doesn’t support it yet. It’s not hard, but the instructions are scattered across GitHub issues and random threads, so here’s the full walkthrough.

By the end of this guide you’ll have Jellyseerr running from source as a systemd service, behind a domain, with Pocket ID handling authentication so your users can log in with a single click instead of remembering yet another password.

Why OIDC?

If you’re running a homelab with multiple services, you probably already have an identity provider like Pocket ID, Authentik, or Authelia. OIDC (OpenID Connect) lets your users sign into Jellyseerr with the same account they use for everything else. One login, no separate passwords.

The stable Jellyseerr release doesn’t support this. But there’s a preview branch that adds OIDC support, and it’s been working great for me.

What you’ll need

• A Proxmox LXC container (or any Linux box) with at least 2GB RAM and 10GB storage
• An OIDC provider already running. This guide uses Pocket ID, but any OIDC provider works
• Your OIDC provider accessible via a domain (e.g., auth.yourdomain.com)
• A domain or subdomain for Jellyseerr (e.g., requests.yourdomain.com)
• A reverse proxy or tunnel to expose Jellyseerr (Nginx Proxy Manager, Caddy, Cloudflare Tunnel, whatever you’re comfortable with)

If you don’t have an OIDC provider set up yet, go do that first. The rest of this guide assumes you have one running and accessible.

The plan

Part 1: Build from source. Clone the repo, check out the OIDC branch, build it, create a dedicated user, and set it up as a systemd service.

Part 2: Domain & reverse proxy. Quick overview of your options for exposing Jellyseerr with a domain. This assumes you already know how to do reverse proxying, so we’re just covering the Jellyseerr-specific bits.

Part 3: OIDC configuration. Set up the OIDC client in Pocket ID, then configure Jellyseerr to use it. This is where the magic happens.

Let’s start with the build.