Auto-update README with current k8s applications

Generated by CI/CD workflow on 2026-03-16 13:54:52

This PR updates the README.md file with the current list of applications found in the k8s/ directory structure.

k8s/apps/furumi-server/deployment.yaml

@@ -22,7 +22,10 @@ spec:
           imagePullPolicy: Always
           env:
             - name: FURUMI_TOKEN
-              value: "f38387266e75effe891b7953eb9c06b4"
+              valueFrom:
+                secretKeyRef:
+                  name: furumi-ng-token
+                  key: TOKEN
             - name: FURUMI_ROOT
               value: "/media"
           ports:

k8s/apps/furumi-server/external-secrets.yaml

@@ -0,0 +1,23 @@
+---
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: furumi-ng-token
+spec:
+  target:
+    name: furumi-ng-token
+    deletionPolicy: Delete
+    template:
+      type: Opaque
+      data:
+        TOKEN: |-
+          {{ .token }}
+  data:
+    - secretKey: token
+      sourceRef:
+        storeRef:
+          name: vaultwarden-login
+          kind: ClusterSecretStore
+      remoteRef:
+        key: b8b8c3a2-c3fe-42d3-9402-0ae305e1455f
+        property: fields[0].value

k8s/apps/furumi-server/kustomization.yaml

@@ -6,3 +6,4 @@ resources:
   - deployment.yaml
   - service.yaml
   - servicemonitor.yaml
+  - external-secrets.yaml

k8s/apps/matrix/external-secrets.yaml

@@ -61,8 +61,8 @@ spec:
                 scope: "openid profile email"
                 claims_imports:
                   localpart:
-                    action: require
-                    template: "{{ `{{ user.preferred_username }}` }}"
+                    action: suggest
+                    template: "{{ `{{ user.preferred_username | split(\"@\") | first }}` }}"
                   displayname:
                     action: suggest
                     template: "{{ `{{ user.name }}` }}"

k8s/apps/matrix/matrix-stack-values.yaml

@@ -25,7 +25,7 @@ hookshot:
 synapse:
   enabled: true
   ingress:
-    host: matrix.hexor.cy
+    host: synapse.matrix.hexor.cy
   postgres:
     host: psql.psql.svc
     port: 5432
@@ -35,11 +35,6 @@ synapse:
     password:
       secret: matrix-postgres-creds
       secretKey: synapse_db_password
-  additional:
-    0-unsafe-locale:
-      config: |
-        database:
-          allow_unsafe_locale: true
   media:
     storage:
       size: 20Gi
@@ -79,7 +74,7 @@ matrixAuthenticationService:
 elementWeb:
   enabled: true
   ingress:
-    host: chat.hexor.cy
+    host: chat.matrix.hexor.cy
   # nodeSelector:
   #   kubernetes.io/hostname: nas.homenet
 
@@ -87,7 +82,7 @@ elementWeb:
 elementAdmin:
   enabled: true
   ingress:
-    host: matrix-admin.hexor.cy
+    host: admin.matrix.hexor.cy
   # nodeSelector:
   #   kubernetes.io/hostname: nas.homenet
 

terraform/authentik/oauth2-apps.auto.tfvars

@@ -205,7 +205,7 @@ oauth_applications = {
     refresh_token_validity     = "days=30"
     scope_mappings             = ["openid", "profile", "email"]
     access_groups              = []
-    create_group               = true
+    create_group               = false
     signing_key                = "1b1b5bec-034a-4d96-871a-133f11322360"
   }
 }