Auto-update README with current k8s applications

Generated by CI/CD workflow on 2026-03-18 02:57:59

This PR updates the README.md file with the current list of applications found in the k8s/ directory structure.

k8s/apps/furumi-server/deployment.yaml

@@ -18,7 +18,7 @@ spec:
         kubernetes.io/hostname: master.tail2fe2d.ts.net
       containers:
         - name: furumi-server
-          image: ultradesu/furumi-server:latest
+          image: ultradesu/furumi-server:trunk
           imagePullPolicy: Always
           env:
             - name: FURUMI_TOKEN
@@ -46,8 +46,15 @@ spec:
                 secretKeyRef:
                   name: furumi-ng-creds
                   key: OIDC_REDIRECT_URL
+            - name: FURUMI_OIDC_SESSION_SECRET
+              valueFrom:
+                secretKeyRef:
+                  name: furumi-ng-creds
+                  key: OIDC_SESSION_SECRET
             - name: FURUMI_ROOT
               value: "/media"
+            - name: RUST_LOG
+              value: "info"
           ports:
             - name: grpc
               containerPort: 50051

k8s/apps/furumi-server/external-secrets.yaml

@@ -18,6 +18,8 @@ spec:
           {{ .client_secret }}
         OIDC_ISSUER_URL: https://idm.hexor.cy/application/o/furumi-ng-web/
         OIDC_REDIRECT_URL: https://music.hexor.cy/auth/callback
+        OIDC_SESSION_SECRET: |-
+          {{ .session_secret }}
   data:
     - secretKey: token
       sourceRef:
@@ -43,3 +45,11 @@ spec:
       remoteRef:
         key: b8b8c3a2-c3fe-42d3-9402-0ae305e1455f
         property: fields[2].value
+    - secretKey: session_secret
+      sourceRef:
+        storeRef:
+          name: vaultwarden-login
+          kind: ClusterSecretStore
+      remoteRef:
+        key: b8b8c3a2-c3fe-42d3-9402-0ae305e1455f
+        property: fields[3].value

k8s/core/postgresql/external-secrets.yaml

@@ -131,6 +131,8 @@ spec:
           {{ .synapse }}
         USER_mas: |-
           {{ .mas }}
+        USER_furumi: |-
+          {{ .furumi }}
   data:
     - secretKey: authentik
       sourceRef:
@@ -297,4 +299,15 @@ spec:
         metadataPolicy: None
         key: 2a9deb39-ef22-433e-a1be-df1555625e22
         property: fields[15].value
+    - secretKey: furumi
+      sourceRef:
+        storeRef:
+          name: vaultwarden-login
+          kind: ClusterSecretStore
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        metadataPolicy: None
+        key: 2a9deb39-ef22-433e-a1be-df1555625e22
+        property: fields[16].value
 

terraform/authentik/oauth2-apps.auto.tfvars

@@ -225,7 +225,7 @@ oauth_applications = {
     refresh_token_validity     = "days=30"
     scope_mappings             = ["openid", "profile", "email"]
     access_groups              = []
-    create_group               = false
+    create_group               = true
     signing_key                = "1b1b5bec-034a-4d96-871a-133f11322360"
   }
 }