Update k8s/core/authentik/values.yaml

k8s/apps/matrix/matrix-stack-values.yaml

@@ -25,7 +25,7 @@ hookshot:
 synapse:
   enabled: true
   ingress:
-    host: matrix.hexor.cy
+    host: synapse.matrix.hexor.cy
   postgres:
     host: psql.psql.svc
     port: 5432
@@ -35,11 +35,6 @@ synapse:
     password:
       secret: matrix-postgres-creds
       secretKey: synapse_db_password
-  additional:
-    0-unsafe-locale:
-      config: |
-        database:
-          allow_unsafe_locale: true
   media:
     storage:
       size: 20Gi
@@ -79,7 +74,7 @@ matrixAuthenticationService:
 elementWeb:
   enabled: true
   ingress:
-    host: chat.hexor.cy
+    host: chat.matrix.hexor.cy
   # nodeSelector:
   #   kubernetes.io/hostname: nas.homenet
 
@@ -87,7 +82,7 @@ elementWeb:
 elementAdmin:
   enabled: true
   ingress:
-    host: matrix-admin.hexor.cy
+    host: admin.matrix.hexor.cy
   # nodeSelector:
   #   kubernetes.io/hostname: nas.homenet
 

k8s/core/authentik/values.yaml

@@ -54,19 +54,6 @@ server:
         traefik.ingress.kubernetes.io/router.middlewares: kube-system-https-redirect@kubernetescrd
       hosts:
         - idm.hexor.cy
-        - nas.hexor.cy       # TrueNAS Limassol
-        - nc.hexor.cy        # NaxtCloud
-        - of.hexor.cy        # Outfleet-v2
-        - k8s.hexor.cy       # k8s dashboard
-        - qbt.hexor.cy       # qBittorent for Jellyfin
-        - prom.hexor.cy      # Prometheus
-        - khm.hexor.cy       # Known Hosts keys Manager
-        - backup.hexor.cy    # Kopia Backup UI
-        - fm.hexor.cy        # Filemanager
-        - minecraft.hexor.cy # Minecraft UI and server
-        - pass.hexor.cy      # k8s-secret for openai
-        - ps.hexor.cy        # pasarguard UI
-#       - rw.hexor.cy        # RemnaWave UI
       tls:
         - secretName: idm-tls
           hosts:

k8s/core/cert-manager/issuer.yaml

@@ -37,4 +37,5 @@ spec:
           dnsZones:
             - "ps.hexor.cy"
             - "of.hexor.cy"
+            - "matrix.hexor.cy"
 

terraform/authentik/oauth2-apps.auto.tfvars

@@ -197,7 +197,7 @@ oauth_applications = {
     redirect_uris = [
       "https://auth.matrix.hexor.cy/upstream/callback/001KKV4EKY7KG98W2M9T806K6A",
     ]
-    meta_launch_url            = "https://matrix.hexor.cy"
+    meta_launch_url            = "https://chat.matrix.hexor.cy"
     client_type                = "confidential"
     include_claims_in_id_token = true
     access_code_validity       = "minutes=1"
@@ -205,7 +205,7 @@ oauth_applications = {
     refresh_token_validity     = "days=30"
     scope_mappings             = ["openid", "profile", "email"]
     access_groups              = []
-    create_group               = true
+    create_group               = false
     signing_key                = "1b1b5bec-034a-4d96-871a-133f11322360"
   }
 }