Auto-update README with current k8s applications

Generated by CI/CD workflow on 2026-03-16 10:05:32

This PR updates the README.md file with the current list of applications found in the k8s/ directory structure.

k8s/apps/matrix/external-secrets.yaml

@@ -21,22 +21,16 @@ spec:
           name: vaultwarden-login
           kind: ClusterSecretStore
       remoteRef:
-        conversionStrategy: Default
+        key: CHANGE_ME
-        decodingStrategy: None
+        property: CHANGE_ME
-        metadataPolicy: None
-        key: 2a9deb39-ef22-433e-a1be-df1555625e22
-        property: fields[14].value
     - secretKey: mas_db_password
       sourceRef:
         storeRef:
           name: vaultwarden-login
           kind: ClusterSecretStore
       remoteRef:
-        conversionStrategy: Default
+        key: CHANGE_ME
-        decodingStrategy: None
+        property: CHANGE_ME
-        metadataPolicy: None
-        key: 2a9deb39-ef22-433e-a1be-df1555625e22
-        property: fields[15].value
 ---
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
@@ -76,19 +70,13 @@ spec:
           name: vaultwarden-login
           kind: ClusterSecretStore
       remoteRef:
-        conversionStrategy: Default
+        key: CHANGE_ME
-        decodingStrategy: None
+        property: CHANGE_ME
-        metadataPolicy: None
-        key: ca76867f-49f3-4a30-9ef3-b05af35ee49a
-        property: fields[0].value
     - secretKey: oauth_client_secret
       sourceRef:
         storeRef:
           name: vaultwarden-login
           kind: ClusterSecretStore
       remoteRef:
-        conversionStrategy: Default
+        key: CHANGE_ME
-        decodingStrategy: None
+        property: CHANGE_ME
-        metadataPolicy: None
-        key: ca76867f-49f3-4a30-9ef3-b05af35ee49a
-        property: fields[1].value

k8s/apps/matrix/matrix-stack-values.yaml

@@ -20,6 +20,8 @@ matrixRTC:
   enabled: false
 hookshot:
   enabled: false
+haproxy:
+  enabled: false
 
 ## Synapse homeserver
 synapse:
@@ -76,6 +78,8 @@ elementAdmin:
   # nodeSelector:
   #   kubernetes.io/hostname: nas.homenet
 
-## Well-known delegation on the base domain (host is derived from serverName)
+## Well-known delegation on the base domain
 wellKnownDelegation:
   enabled: true
+  ingress:
+    host: matrix.hexor.cy

k8s/core/postgresql/external-secrets.yaml

@@ -127,10 +127,6 @@ spec:
           {{ .mmdl }}
         USER_n8n: |-
           {{ .n8n }}
-        USER_synapse: |-
-          {{ .synapse }}
-        USER_mas: |-
-          {{ .mas }}
   data:
     - secretKey: authentik
       sourceRef:
@@ -275,26 +271,4 @@ spec:
         metadataPolicy: None
         key: 2a9deb39-ef22-433e-a1be-df1555625e22
         property: fields[13].value
-    - secretKey: synapse
-      sourceRef:
-        storeRef:
-          name: vaultwarden-login
-          kind: ClusterSecretStore
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        metadataPolicy: None
-        key: 2a9deb39-ef22-433e-a1be-df1555625e22
-        property: fields[14].value
-    - secretKey: mas
-      sourceRef:
-        storeRef:
-          name: vaultwarden-login
-          kind: ClusterSecretStore
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        metadataPolicy: None
-        key: 2a9deb39-ef22-433e-a1be-df1555625e22
-        property: fields[15].value
 

terraform/authentik/oauth2-apps.auto.tfvars

@@ -188,25 +188,5 @@ oauth_applications = {
     create_group               = true
     signing_key                = "1b1b5bec-034a-4d96-871a-133f11322360"
   }
-  "matrix" = {
-    name             = "Matrix Chat"
-    slug             = "matrix"
-    group            = "Tools"
-    meta_description = "Matrix Chat"
-    meta_icon        = "https://img.icons8.com/ios/100/40C057/matrix-logo.png"
-    redirect_uris = [
-      "https://matrix.hexor.cy/_matrix/client/unstable/org.matrix.msc2965/auth/upstream/callback",
-    ]
-    meta_launch_url            = "https://matrix.hexor.cy"
-    client_type                = "confidential"
-    include_claims_in_id_token = true
-    access_code_validity       = "minutes=1"
-    access_token_validity      = "minutes=5"
-    refresh_token_validity     = "days=30"
-    scope_mappings             = ["openid", "profile", "email"]
-    access_groups              = []
-    create_group               = true
-    signing_key                = "1b1b5bec-034a-4d96-871a-133f11322360"
-  }
 }