feat(gitops): migrate domain to riotpiao.com, add CNPG + Forgejo HA on Redis/Postgres, wire ArgoCD apps — enables cluster rebuild after etcd wipe and unblocks the git-source chicken-egg via standalone Helm-source Applications

k8s/infrastructure/minio/minio-tenant.yaml

@@ -111,7 +111,7 @@ spec:
   # Environment variables — OIDC config
   env:
     - name: MINIO_IDENTITY_OPENID_CONFIG_URL
-      value: "https://authentik.riotpiao.homelab.com/application/o/minio/.well-known/openid-configuration"
+      value: "https://authentik.riotpiao.com/application/o/minio/.well-known/openid-configuration"
     - name: MINIO_IDENTITY_OPENID_CLIENT_ID
       value: "minio"
     - name: MINIO_IDENTITY_OPENID_CLIENT_SECRET
@@ -124,7 +124,7 @@ spec:
     - name: MINIO_IDENTITY_OPENID_SCOPES
       value: "openid,profile,email,minio"
     - name: MINIO_IDENTITY_OPENID_REDIRECT_URI
-      value: "https://minio.riotpiao.homelab.com/oauth_callback"
+      value: "https://minio.riotpiao.com/oauth_callback"
     - name: MINIO_IDENTITY_OPENID_DISPLAY_NAME
       value: "Authentik"
 

k8s/infrastructure/minio/minio-values.yaml

@@ -42,11 +42,11 @@ envFrom:
       name: minio-oidc
 
 environment:
-  MINIO_IDENTITY_OPENID_CONFIG_URL: "https://authentik.riotpiao.homelab.com/application/o/minio/.well-known/openid-configuration"
+  MINIO_IDENTITY_OPENID_CONFIG_URL: "https://authentik.riotpiao.com/application/o/minio/.well-known/openid-configuration"
   MINIO_IDENTITY_OPENID_CLIENT_ID: "minio"
   MINIO_IDENTITY_OPENID_CLAIM_NAME: "policy"
   MINIO_IDENTITY_OPENID_SCOPES: "openid,profile,email,minio"
-  MINIO_IDENTITY_OPENID_REDIRECT_URI: "https://minio.riotpiao.homelab.com/oauth_callback"
+  MINIO_IDENTITY_OPENID_REDIRECT_URI: "https://minio.riotpiao.com/oauth_callback"
   MINIO_IDENTITY_OPENID_DISPLAY_NAME: "Authentik"
 
 podAnnotations: