feat(gitops): migrate domain to riotpiao.com, add CNPG + Forgejo HA on Redis/Postgres, wire ArgoCD apps — enables cluster rebuild after etcd wipe and unblocks the git-source chicken-egg via standalone Helm-source Applications

k8s/security/iam/example_register_dashboard.py

@@ -23,7 +23,7 @@ To use this example:
   python3 register_oauth_app.py \\
     --service-name dashboard-service \\
     --namespace apps \\
-    --redirect-uri "https://dashboard.riotpiao.homelab.com/oauth2/callback" \\
+    --redirect-uri "https://dashboard.riotpiao.com/oauth2/callback" \\
     --service-name-in-vault DASHBOARD \\
     --vault-jwt-policy shell-secrets \\
     --add-group dashboard-admins \\
@@ -34,7 +34,7 @@ To use this example:
     http://localhost:7000/api/v3/core/applications/?slug=dashboard-service | jq .
   
   # 5. Test OAuth callback (requires app running)
-  # Browser: http://dashboard.riotpiao.homelab.com/login
+  # Browser: http://dashboard.riotpiao.com/login
   # Should redirect to Authentik → back to dashboard with session
 """
 
@@ -68,7 +68,7 @@ def example_dashboard_service():
         "register_oauth_app.py",
         "--service-name", "dashboard-service",
         "--namespace", "apps",
-        "--redirect-uri", "https://dashboard.riotpiao.homelab.com/oauth2/callback",
+        "--redirect-uri", "https://dashboard.riotpiao.com/oauth2/callback",
         "--service-name-in-vault", "DASHBOARD",
         "--vault-jwt-policy", "shell-secrets",
         "--add-group", "dashboard-admins",
@@ -122,7 +122,7 @@ def verify_example():
     print()
     
     print("✅ Test OAuth redirect (requires app running):")
-    print("  curl -L https://dashboard.riotpiao.homelab.com/login")
+    print("  curl -L https://dashboard.riotpiao.com/login")
     print("  # Should redirect to Authentik, then back to dashboard")
     print()