diff --git a/config.example.yaml b/config.example.yaml
index 249e9d9..9d4b1e6 100644
--- a/config.example.yaml
+++ b/config.example.yaml
@@ -148,6 +148,10 @@ oidc:
   # userinfo_endpoint: ""
 
   # The client ID for the OIDC client
+  # For the best experience please ensure this is *identical* to the client_id
+  # you are using for Headscale. A lot of OIDC providers will use different
+  # subjects per user based on the client_id and for this to work correctly
+  # they need to be identical between Headscale and Headplane.
   client_id: "your-client-id"
 
   # The client secret for the OIDC client
diff --git a/flake.lock b/flake.lock
index cd249c1..3f08d0a 100644
--- a/flake.lock
+++ b/flake.lock
@@ -40,11 +40,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1759826507,
-        "narHash": "sha256-vwXL9H5zDHEQA0oFpww2one0/hkwnPAjc47LRph6d0I=",
+        "lastModified": 1760164275,
+        "narHash": "sha256-gKl2Gtro/LNf8P+4L3S2RsZ0G390ccd5MyXYrTdMCFE=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "bce5fe2bb998488d8e7e7856315f90496723793c",
+        "rev": "362791944032cb532aabbeed7887a441496d5e6e",
         "type": "github"
       },
       "original": {