JWKS_URL=https://auth.iceberg.black/realms/iceberg/protocol/openid-connect/certs ISSUER=https://auth.iceberg.black/realms/iceberg OLLAMA_URL=... CORS_ORIGIN=