From 1c7185aed624f7497eb52e91149e90221f174d7d Mon Sep 17 00:00:00 2001
From: Aleksandr Bogomiakov <git@hexor.cy>
Date: Tue, 6 Oct 2026 18:05:41 +0100
Subject: [PATCH] NG: Vaultwarden moves to vw.hexor.cy (vw.btwiusearch.net
 dropped)

Co-Authored-By: Claude <noreply@anthropic.com>
---
 k8s-ng/core/secret-stores/bitwarden-cli.yaml | 2 +-
 k8s-ng/core/vaultwarden/deployment.yaml      | 2 +-
 k8s-ng/core/vaultwarden/ingress.yaml         | 4 ++--
 terraform/keycloak/terraform.tfvars          | 6 +++---
 4 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/k8s-ng/core/secret-stores/bitwarden-cli.yaml b/k8s-ng/core/secret-stores/bitwarden-cli.yaml
index 7ce9186..9a07094 100644
--- a/k8s-ng/core/secret-stores/bitwarden-cli.yaml
+++ b/k8s-ng/core/secret-stores/bitwarden-cli.yaml
@@ -3,7 +3,7 @@
 # with email + password, so keep password login enabled for it, i.e. no
 # SSO_ONLY, or switch the image to API-key login):
 #   kubectl -n external-secrets create secret generic bitwarden-cli \
-#     --from-literal=BW_HOST=https://vw.btwiusearch.net \
+#     --from-literal=BW_HOST=https://vw.hexor.cy \
 #     --from-literal=BW_USERNAME=<bot email> --from-literal=BW_PASSWORD=<password>
 # Image source: Dockerfile-bitwarden-cli in this directory.
 apiVersion: apps/v1
diff --git a/k8s-ng/core/vaultwarden/deployment.yaml b/k8s-ng/core/vaultwarden/deployment.yaml
index 11e26eb..c701e4e 100644
--- a/k8s-ng/core/vaultwarden/deployment.yaml
+++ b/k8s-ng/core/vaultwarden/deployment.yaml
@@ -34,7 +34,7 @@ spec:
                 optional: true
           env:
             - name: DOMAIN
-              value: https://vw.btwiusearch.net
+              value: https://vw.hexor.cy
             - name: ORG_GROUPS_ENABLED
               value: "true"
             - name: SSO_AUTHORITY
diff --git a/k8s-ng/core/vaultwarden/ingress.yaml b/k8s-ng/core/vaultwarden/ingress.yaml
index 3981075..f7ce97a 100644
--- a/k8s-ng/core/vaultwarden/ingress.yaml
+++ b/k8s-ng/core/vaultwarden/ingress.yaml
@@ -7,7 +7,7 @@ metadata:
     traefik.ingress.kubernetes.io/router.entrypoints: websecure
 spec:
   rules:
-    - host: vw.btwiusearch.net
+    - host: vw.hexor.cy
       http:
         paths:
           - path: /
@@ -20,4 +20,4 @@ spec:
   tls:
     - secretName: vaultwarden-tls
       hosts:
-        - vw.btwiusearch.net
+        - vw.hexor.cy
diff --git a/terraform/keycloak/terraform.tfvars b/terraform/keycloak/terraform.tfvars
index 12554ac..2f6250e 100644
--- a/terraform/keycloak/terraform.tfvars
+++ b/terraform/keycloak/terraform.tfvars
@@ -43,9 +43,9 @@ oauth2_applications = {
     extra_optional_scopes     = ["offline_access"]
   }
   Vaultwarden = {
-    redirect_uris             = ["https://vw.btwiusearch.net/identity/connect/oidc-signin"]
-    web_origins               = ["https://vw.btwiusearch.net"]
-    post_logout_redirect_uris = ["https://vw.btwiusearch.net/*"]
+    redirect_uris             = ["https://vw.hexor.cy/identity/connect/oidc-signin"]
+    web_origins               = ["https://vw.hexor.cy"]
+    post_logout_redirect_uris = ["https://vw.hexor.cy/*"]
     extra_optional_scopes     = ["offline_access"]
     # Bitwarden clients treat tokens shorter than ~10 minutes as expired.
     access_token_lifespan = "900"