Auto-update README with current k8s applications

Generated by CI/CD workflow on 2026-03-16 10:31:52

This PR updates the README.md file with the current list of applications found in the k8s/ directory structure.

k8s/apps/matrix/external-secrets.yaml

@@ -52,12 +52,11 @@ spec:
         mas-oidc.yaml: |
           upstream_oauth2:
             providers:
-              - id: 001KKV4EKY7KG98W2M9T806K6A
+              - id: authentik
                 human_name: Authentik
                 issuer: https://idm.hexor.cy/application/o/matrix/
-                client_id: "{{ .oauth_client_id }}"
+                client_id: {{ .oauth_client_id }}
-                client_secret: "{{ .oauth_client_secret }}"
+                client_secret: {{ .oauth_client_secret }}
-                token_endpoint_auth_method: client_secret_post
                 scope: "openid profile email"
                 claims_imports:
                   localpart:

k8s/apps/matrix/matrix-stack-values.yaml

@@ -24,8 +24,6 @@ hookshot:
 ## Synapse homeserver
 synapse:
   enabled: true
-  ingress:
-    host: matrix.hexor.cy
   postgres:
     host: psql.psql.svc
     port: 5432
@@ -35,11 +33,6 @@ synapse:
     password:
       secret: matrix-postgres-creds
       secretKey: synapse_db_password
-  additional:
-    0-unsafe-locale:
-      config: |
-        database:
-          allow_unsafe_locale: true
   media:
     storage:
       size: 20Gi
@@ -50,8 +43,6 @@ synapse:
 ## Matrix Authentication Service
 matrixAuthenticationService:
   enabled: true
-  ingress:
-    host: auth.matrix.hexor.cy
   postgres:
     host: psql.psql.svc
     port: 5432
@@ -61,15 +52,9 @@ matrixAuthenticationService:
     password:
       secret: matrix-postgres-creds
       secretKey: mas_db_password
-  ## Admin policy
+  ## Authentik OIDC upstream provider
   additional:
-    0-admin-policy:
+    0-oidc:
-      config: |
-        policy:
-          data:
-            admin_users:
-              - username: ultradesu
-    1-oidc:
       configSecret: matrix-oidc-config
       configSecretKey: mas-oidc.yaml
   # nodeSelector:

terraform/authentik/oauth2-apps.auto.tfvars

@@ -195,7 +195,7 @@ oauth_applications = {
     meta_description = "Matrix Chat"
     meta_icon        = "https://img.icons8.com/ios/100/40C057/matrix-logo.png"
     redirect_uris = [
-      "https://auth.matrix.hexor.cy/upstream/callback/001KKV4EKY7KG98W2M9T806K6A",
+      "https://matrix.hexor.cy/_matrix/client/unstable/org.matrix.msc2965/auth/upstream/callback",
     ]
     meta_launch_url            = "https://matrix.hexor.cy"
     client_type                = "confidential"