Auto-update README with current k8s applications

Generated by CI/CD workflow on 2026-03-16 19:13:43

This PR updates the README.md file with the current list of applications found in the k8s/ directory structure.

k8s/apps/furumi-server/deployment.yaml

@@ -24,28 +24,8 @@ spec:
             - name: FURUMI_TOKEN
               valueFrom:
                 secretKeyRef:
-                  name: furumi-ng-creds
+                  name: furumi-ng-token
                   key: TOKEN
-            - name: OIDC_CLIENT_ID
-              valueFrom:
-                secretKeyRef:
-                  name: furumi-ng-creds
-                  key: OIDC_CLIENT_ID
-            - name: OIDC_CLIENT_SECRET
-              valueFrom:
-                secretKeyRef:
-                  name: furumi-ng-creds
-                  key: OIDC_CLIENT_SECRET
-            - name: OIDC_ISSUER_URL
-              valueFrom:
-                secretKeyRef:
-                  name: furumi-ng-creds
-                  key: OIDC_ISSUER_URL
-            - name: OIDC_REDIRECT_URL
-              valueFrom:
-                secretKeyRef:
-                  name: furumi-ng-creds
-                  key: OIDC_REDIRECT_URL
             - name: FURUMI_ROOT
               value: "/media"
           ports:

k8s/apps/furumi-server/external-secrets.yaml

@@ -2,22 +2,16 @@
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
-  name: furumi-ng-creds
+  name: furumi-ng-token
 spec:
   target:
-    name: furumi-ng-creds
+    name: furumi-ng-token
     deletionPolicy: Delete
     template:
       type: Opaque
       data:
         TOKEN: |-
           {{ .token }}
-        OIDC_CLIENT_ID: |-
-          {{ .client_id }}
-        OIDC_CLIENT_SECRET: |-
-          {{ .client_secret }}
-        OIDC_ISSUER_URL: https://idm.hexor.cy/application/o/furumi-ng-web/
-        OIDC_REDIRECT_URL: https://music.hexor.cy/auth/callback
   data:
     - secretKey: token
       sourceRef:
@@ -27,19 +21,3 @@ spec:
       remoteRef:
         key: b8b8c3a2-c3fe-42d3-9402-0ae305e1455f
         property: fields[0].value
-    - secretKey: client_id
-      sourceRef:
-        storeRef:
-          name: vaultwarden-login
-          kind: ClusterSecretStore
-      remoteRef:
-        key: b8b8c3a2-c3fe-42d3-9402-0ae305e1455f
-        property: fields[1].value
-    - secretKey: client_secret
-      sourceRef:
-        storeRef:
-          name: vaultwarden-login
-          kind: ClusterSecretStore
-      remoteRef:
-        key: b8b8c3a2-c3fe-42d3-9402-0ae305e1455f
-        property: fields[2].value

k8s/apps/matrix/matrix-stack-values.yaml

@@ -16,32 +16,11 @@ postgres:
   enabled: false
 
 ## Disable components we don't need yet
+matrixRTC:
+  enabled: false
 hookshot:
   enabled: false
 
-## MatrixRTC - voice/video calls via LiveKit SFU
-matrixRTC:
-  enabled: true
-  ingress:
-    host: livekit.matrix.hexor.cy
-  sfu:
-    enabled: true
-    manualIP: "138.201.61.182"
-    nodeSelector:
-      kubernetes.io/hostname: master.tail2fe2d.ts.net
-    exposedServices:
-      rtcTcp:
-        enabled: true
-        port: 30881
-      rtcMuxedUdp:
-        enabled: true
-        port: 30882
-      turnTLS:
-        enabled: true
-        port: 31443
-        domain: turn.matrix.hexor.cy
-        tlsTerminationOnPod: true
-
 ## Synapse homeserver
 synapse:
   enabled: true

terraform/authentik/oauth2-apps.auto.tfvars

@@ -208,25 +208,5 @@ oauth_applications = {
     create_group               = false
     signing_key                = "1b1b5bec-034a-4d96-871a-133f11322360"
   }
-  "furumi-ng-web" = {
-    name             = "Furumi Web Player"
-    slug             = "furumi-ng-web"
-    group            = "Tools"
-    meta_description = "Furumi Web Player"
-    meta_icon        = "https://img.icons8.com/pulsar-color/48/music.png"
-    redirect_uris = [
-      "https://music.hexor.cy/auth/callback",
-    ]
-    meta_launch_url            = "https://music.hexor.cy"
-    client_type                = "confidential"
-    include_claims_in_id_token = true
-    access_code_validity       = "minutes=1"
-    access_token_validity      = "minutes=5"
-    refresh_token_validity     = "days=30"
-    scope_mappings             = ["openid", "profile", "email"]
-    access_groups              = []
-    create_group               = false
-    signing_key                = "1b1b5bec-034a-4d96-871a-133f11322360"
-  }
 }