diff --git a/geo tracking/traccar/traccar.xml b/geo tracking/traccar/traccar.xml
index 2b45183..c9e2d65 100644
--- a/geo tracking/traccar/traccar.xml	
+++ b/geo tracking/traccar/traccar.xml	
@@ -3,10 +3,22 @@
 <properties>
 
     <!-- Documentation: https://www.traccar.org/configuration-file/ -->
-
     <entry key='database.driver'>org.h2.Driver</entry>
     <entry key='database.url'>jdbc:h2:./data/database</entry>
     <entry key='database.user'>sa</entry>
     <entry key='database.password'></entry>
 
+    <!-- Externe Basis-URL deiner Traccar-Instanz (hinter dem Reverse-Proxy) -->
+    <entry key='web.url'>https://traccar.scheidel.biz</entry>
+
+    <!-- OpenID Connect / OAuth2 mit Authentik -->
+    <entry key='openid.clientId'>NOuIQtO993McxAMAJKY6h2kwFpMsJHgAgPXEXjjK</entry>
+    <entry key='openid.clientSecret'>zPfGZalVwvq2BWxUz2EGOJaHzkiYFNlXd5aSbY8vrXKiESz2I2lpybyGb6CVI9JGu88zb9OWpGpU4Ml7KW1z7SUK71S4haCiUTqilJX7mMK0EsjkNfDeSzi41oec39p7</entry>
+
+    <!-- Bequeme Variante: Discovery über issuerUrl -->
+    <entry key='openid.issuerUrl'>https://authentik.scheidel.biz/application/o/traccar/</entry>
+
+    <!-- Lokale Anmeldung deaktivieren -->
+    <entry key='openid.force'>true</entry>
+
 </properties>