NG: Vaultwarden moves to vw.hexor.cy (vw.btwiusearch.net dropped)

Co-Authored-By: Claude <noreply@anthropic.com>

k8s-ng/core/secret-stores/bitwarden-cli.yaml

@@ -3,7 +3,7 @@
 # with email + password, so keep password login enabled for it, i.e. no
 # SSO_ONLY, or switch the image to API-key login):
 #   kubectl -n external-secrets create secret generic bitwarden-cli \
-#     --from-literal=BW_HOST=https://vw.btwiusearch.net \
+#     --from-literal=BW_HOST=https://vw.hexor.cy \
 #     --from-literal=BW_USERNAME=<bot email> --from-literal=BW_PASSWORD=<password>
 # Image source: Dockerfile-bitwarden-cli in this directory.
 apiVersion: apps/v1

k8s-ng/core/vaultwarden/deployment.yaml

@@ -34,7 +34,7 @@ spec:
                 optional: true
           env:
             - name: DOMAIN
-              value: https://vw.btwiusearch.net
+              value: https://vw.hexor.cy
             - name: ORG_GROUPS_ENABLED
               value: "true"
             - name: SSO_AUTHORITY

k8s-ng/core/vaultwarden/ingress.yaml

@@ -7,7 +7,7 @@ metadata:
     traefik.ingress.kubernetes.io/router.entrypoints: websecure
 spec:
   rules:
-    - host: vw.btwiusearch.net
+    - host: vw.hexor.cy
       http:
         paths:
           - path: /
@@ -20,4 +20,4 @@ spec:
   tls:
     - secretName: vaultwarden-tls
       hosts:
-        - vw.btwiusearch.net
+        - vw.hexor.cy

terraform/keycloak/terraform.tfvars

@@ -43,9 +43,9 @@ oauth2_applications = {
     extra_optional_scopes     = ["offline_access"]
   }
   Vaultwarden = {
-    redirect_uris             = ["https://vw.btwiusearch.net/identity/connect/oidc-signin"]
-    web_origins               = ["https://vw.btwiusearch.net"]
-    post_logout_redirect_uris = ["https://vw.btwiusearch.net/*"]
+    redirect_uris             = ["https://vw.hexor.cy/identity/connect/oidc-signin"]
+    web_origins               = ["https://vw.hexor.cy"]
+    post_logout_redirect_uris = ["https://vw.hexor.cy/*"]
     extra_optional_scopes     = ["offline_access"]
     # Bitwarden clients treat tokens shorter than ~10 minutes as expired.
     access_token_lifespan = "900"