5 Commits

Include renames

Author	SHA1	Message	Date
rock	539ef848d0	fix: use external Authentik URL for MinIO OIDC config discovery	2026-09-04 21:25:30 -07:00
rock	f9654986ad	fix(minio): use in-cluster URL for OIDC config fetch ... MinIO pod was getting 503 from public URL at startup. Use in-cluster authentik-server.iam.svc for metadata fetch; browser redirects still use public URLs from OIDC metadata response.	2026-09-03 23:15:19 -07:00
Story Crater Bot	e8e5acfb13	feat: add paperless-ngx with OIDC, CNPG db, cp-3 HDD media, MinIO backup ... Fixes controlplane.tftpl's install.wipe:true (should be false, live CPs already run false) and syncs coredns Corefile back to what's actually deployed (drops an unrolled-out, stale Kong-era rewrite).	2026-08-25 11:11:37 -07:00
Story Crater Bot	78e788abb3	(fix): fix sigV4 oidc issue when sign-in with authentik	2026-08-25 08:15:43 -07:00
Story Crater Bot	41f5b05395	refactor(k8s): consolidate to infra/+apps/ single-source tree, dedicated per-app CNPG (authentik-db/temporal-db), wire monitoring-config, forgejo→cicd ns, drop orphan/stale (data-schemas, ollama, story-crater, sqs/argocd, key-rotation)	2026-08-18 15:08:03 -07:00