Fixed matrix login for keycloak

README.md

@@ -53,7 +53,6 @@ ArgoCD homelab project
 | **k8s-secrets** | [![k8s-secrets](https://ag.hexor.cy/api/badge?name=k8s-secrets&revision=true)](https://ag.hexor.cy/applications/argocd/k8s-secrets) |
 | **khm** | [![khm](https://ag.hexor.cy/api/badge?name=khm&revision=true)](https://ag.hexor.cy/applications/argocd/khm) |
 | **lidarr** | [![lidarr](https://ag.hexor.cy/api/badge?name=lidarr&revision=true)](https://ag.hexor.cy/applications/argocd/lidarr) |
-| **llamacpp** | [![llamacpp](https://ag.hexor.cy/api/badge?name=llamacpp&revision=true)](https://ag.hexor.cy/applications/argocd/llamacpp) |
 | **matrix** | [![matrix](https://ag.hexor.cy/api/badge?name=matrix&revision=true)](https://ag.hexor.cy/applications/argocd/matrix) |
 | **mtproxy** | [![mtproxy](https://ag.hexor.cy/api/badge?name=mtproxy&revision=true)](https://ag.hexor.cy/applications/argocd/mtproxy) |
 | **n8n** | [![n8n](https://ag.hexor.cy/api/badge?name=n8n&revision=true)](https://ag.hexor.cy/applications/argocd/n8n) |

k8s/apps/matrix/external-secrets.yaml

@@ -53,8 +53,8 @@ spec:
           upstream_oauth2:
             providers:
               - id: 001KKV4EKY7KG98W2M9T806K6A
-                human_name: Authentik
+                human_name: SSO Login
-                issuer: https://idm.hexor.cy/application/o/matrix/
+                issuer: https://auth.hexor.cy/auth/realms/hexor
                 client_id: "{{ .oauth_client_id }}"
                 client_secret: "{{ .oauth_client_secret }}"
                 token_endpoint_auth_method: client_secret_post
@@ -93,3 +93,4 @@ spec:
         metadataPolicy: None
         key: ca76867f-49f3-4a30-9ef3-b05af35ee49a
         property: fields[1].value
+                    on_conflict: replace

k8s/apps/paperless/external-secrets.yaml

@@ -18,8 +18,8 @@ spec:
             "openid_connect": {
               "APPS": [
                 {
-                  "provider_id": "authentik",
+                  "provider_id": "keycloak",
-                  "name": "Authentik",
+                  "name": "Keycloak",
                   "client_id": "{{ .oauth_id }}",
                   "secret": "{{ .oauth_secret }}",
                   "settings": {

terraform/keycloak/terraform.tfvars

@@ -60,4 +60,35 @@ oauth2_applications = {
     web_origins               = ["https://pet.hexor.cy", "https://xn--l1acako8eb.xn--p1ai", "https://мурняня.рф", ]
     post_logout_redirect_uris = ["https://pet.hexor.cy/*", "https://xn--l1acako8eb.xn--p1ai/*", "https://мурняня.рф/*"]
   }
+  Paperless-ngx = {
+    redirect_uris             = ["https://docs.hexor.cy/accounts/oidc/authentik/login/callback/"]
+    web_origins               = ["https://docs.hexor.cy"]
+    post_logout_redirect_uris = ["https://docs.hexor.cy/*"]
+  }
+  Immich = {
+    redirect_uris             = [
+      "https://photos.hexor.cy/auth/login",
+      "https://photos.hexor.cy/user-settings",
+      "app.immich:///oauth-callback",
+      "http://photos.homenet:30283/auth/login",
+      "http://photos.homenet:30283/user-settings"
+    ]
+    web_origins               = ["https://photos.hexor.cy", "http://photos.homenet:30283"]
+    post_logout_redirect_uris = ["https://photos.hexor.cy/*", "http://photos.homenet:30283/*"]
+  }
+  HomeAssistant-LMS = {
+    redirect_uris             = ["http://ha-lms:8123/auth/oidc/callback", "http://ha-lms.homenet:8123/auth/oidc/callback"]
+    web_origins               = ["http://ha-lms:8123", "http://ha-lms.homenet:8123"]
+    post_logout_redirect_uris = ["http://ha-lms:8123/*", "http://ha-lms.homenet:8123/*"]
+  }
+  HomeAssistant-LND = {
+    redirect_uris             = ["http://ha-london:8123/auth/oidc/callback", "http://ha-london.tail2fe2d.ts.net:8123/auth/oidc/callback"]
+    web_origins               = ["http://ha-london:8123", "http://ha-london.tail2fe2d.ts.net:8123"]
+    post_logout_redirect_uris = ["http://ha-london:8123/*", "http://ha-london.tail2fe2d.ts.net:8123/*"]
+  }
+  Matrix-Chat = {
+    redirect_uris             = ["https://auth.matrix.hexor.cy/upstream/callback/001KKV4EKY7KG98W2M9T806K6A"]
+    web_origins               = ["https://auth.matrix.hexor.cy"]
+    post_logout_redirect_uris = ["https://auth.matrix.hexor.cy/*"]
+  }
 }