diff --git a/passmower/values.yaml b/passmower/values.yaml
index 4c4fd99..07e6cc3 100644
--- a/passmower/values.yaml
+++ b/passmower/values.yaml
@@ -29,6 +29,17 @@ passmower:
   email_credentials_secretRef: "email-credentials"
   # GitHub OAuth client secret name. Secret must contain GH_CLIENT_ID and GH_CLIENT_SECRET
   github_client_secretRef: "github-client"
+  # Generic OIDC upstream login providers. Each provider's credentials secret must
+  # contain <KEY>_CLIENT_ID and <KEY>_CLIENT_SECRET. Callback path is
+  # /interaction/callback/<key>. Provider appears once its secret is present.
+  oidcProviders:
+    - key: codeberg
+      displayName: Codeberg
+      issuer: https://codeberg.org
+      # Secret must contain CODEBERG_CLIENT_ID and CODEBERG_CLIENT_SECRET
+      clientSecretRef: codeberg-client
+      groupsClaim: groups
+      icon: '<svg viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg"><path fill="#2185D0" d="M11.955.49A12 12 0 0 0 0 12.49a12 12 0 0 0 1.832 6.373L11.838 5.928a.187.14 0 0 1 .324 0l10.006 12.935A12 12 0 0 0 24 12.49a12 12 0 0 0-12-12 12 12 0 0 0-.045 0zm.375 6.467 4.416 17.043a12 12 0 0 0 5.137-4.213L12.516 7.008a.187.14 0 0 0-.186-.05z"/></svg>'
   # Slack API client secret name. Secret must contain SLACK_TOKEN
   slack_client_secretRef: "slack-client"
   # Different texts displayed and sent to the user