Document dashboard CSP environment variables

[maxbrc]

Adds NETBIRD_CSP, NETBIRD_CSP_OIDC_DISCOVERY and
NETBIRD_CSP_OIDC_DISCOVERY_TIMEOUT to the Dashboard Variables table.

NETBIRD_CSP already exists but was undocumented. The other two come from
netbirdio/dashboard#789, which adds the IdP's OIDC endpoint origins to the
CSP connect-src. This is needed when the token or JWKS endpoints sit on a
different host than the issuer (like the issue netbirdio/dashboard#690).

Depends on netbirdio/dashboard#789.
(Sorry for the merge commit, I assume you squash anyways)

Summary by CodeRabbit

• Documentation
  • Added documentation for configuring additional dashboard Content Security Policy (CSP) origins.
  • Documented automatic OIDC discovery for CSP configuration, including its enablement setting and request timeout option.

[vercel]

@maxbrc is attempting to deploy a commit to the NetBird GmbH Team on Vercel.

A member of the Team first needs to authorize it.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Team

Run ID: 21a84f91-6cb4-4a1d-af1a-2cb512b07e06

📥 Commits

Reviewing files that changed from the base of the PR and between e246829 and 5465866.

📒 Files selected for processing (1)

• src/pages/selfhosted/environment-variables.mdx

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.

---

📝 Walkthrough

Walkthrough

The Dashboard Variables table documents three environment variables for dashboard Content Security Policy configuration. The entries cover extra origins, OIDC discovery, and the OIDC discovery timeout.

Changes

Dashboard CSP documentation

Layer / File(s)	Summary
Document dashboard CSP variables src/pages/selfhosted/environment-variables.mdx	Adds documentation for NETBIRD_CSP, NETBIRD_CSP_OIDC_DISCOVERY, and NETBIRD_CSP_OIDC_DISCOVERY_TIMEOUT, including defaults for the OIDC settings.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: ⚪ Minimal · up to 54658

This updates Dashboard CSP environment-variable documentation without changing runtime behavior. No current merge-readiness risk remains.

Poem

A rabbit checks the variable rows
CSP origins now clearly show
OIDC discovery joins the trail
Five seconds marks the timeout scale
Neat docs help the dashboard glow

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely describes the main change: documenting Dashboard CSP environment variables.

✨ Finishing Touches 💡 1

🛠️ Fix failing CI checks 💡

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}