Story Crater Bot d055483aa2 feat: add poimen-memory as an Authentik service-to-service client ...

Client credentials + device code grant, no browser redirect (empty
redirect_uris) - unlike every other SERVICES entry which is
authorization_code web SSO. First real step toward replacing
poimen-memory's static API key with a proper JWT flow.

2026-08-27 11:51:02 -07:00

..

databases

feat: deploy Immich with Authentik OIDC, rock as admin

2026-08-25 18:21:28 -07:00

forgejo-runner

feat(forgejo-runner): split into golang/node/rust runners, retire generic docker runner

2026-08-21 16:49:26 -07:00

iam

feat: add poimen-memory as an Authentik service-to-service client

2026-08-27 11:51:02 -07:00

logging

fix(grafana): add email/login/name_attribute_path for Authentik OIDC — Grafana was falling back to GitHub-style <api_url>/emails (404 'Error getting email address'), breaking OAuth login; read identity from userinfo claims instead

2026-08-18 15:08:04 -07:00

longhorn

fix: add Replace=true sync-option to paperless-media StorageClass

2026-08-25 11:47:33 -07:00

minio

feat: add paperless-ngx with OIDC, CNPG db, cp-3 HDD media, MinIO backup

2026-08-25 11:11:37 -07:00

monitoring

feat: cut api.riotpiao.com over to the Go gateway and retire Kong

2026-08-19 22:51:53 -07:00

rbac

feat: add ServiceAccounts for poimen-memory/kmsvc/immich operator Roles

2026-08-26 19:51:05 -07:00