Story Crater Bot a5c7381c11 feat: add Vault as an Authentik OIDC app for human/CLI login ...

Confidential client for 'vault login -method=oidc' and the Vault UI's
oidc auth method. homelab-admins gets bound automatically like every
other app in SERVICES. Client secret generated on first provision run
into iam/vault-oidc.

2026-08-26 16:42:44 -07:00

..

databases

feat: deploy Immich with Authentik OIDC, rock as admin

2026-08-25 18:21:28 -07:00

forgejo-runner

feat(forgejo-runner): split into golang/node/rust runners, retire generic docker runner

2026-08-21 16:49:26 -07:00

iam

feat: add Vault as an Authentik OIDC app for human/CLI login

2026-08-26 16:42:44 -07:00

logging

fix(grafana): add email/login/name_attribute_path for Authentik OIDC — Grafana was falling back to GitHub-style <api_url>/emails (404 'Error getting email address'), breaking OAuth login; read identity from userinfo claims instead

2026-08-18 15:08:04 -07:00

longhorn

fix: add Replace=true sync-option to paperless-media StorageClass

2026-08-25 11:47:33 -07:00

minio

feat: add paperless-ngx with OIDC, CNPG db, cp-3 HDD media, MinIO backup

2026-08-25 11:11:37 -07:00

monitoring

feat: cut api.riotpiao.com over to the Go gateway and retire Kong

2026-08-19 22:51:53 -07:00

rbac

feat: add poimen-memory-admins group/permissions and k8s RBAC role

2026-08-25 21:50:05 -07:00