Refactor Authentik blueprints into common.yaml (shared admins group), grafana.yaml (updated with !Find and groups scope), and forgejo.yaml (new provider + application). Add forgejo-client-secret to ExternalSecret and worker deployment. Configure Forgejo oauth2_client for auto-registration with login-based account linking to safely preserve existing accounts. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| .gitkeep | ||
| feature-agent-change-process.feature.md | ||
| feature-authentik-mikado-chain.infra.md | ||
| feature-deploy-authentik.feature.md | ||
| feature-forgejo-authentik-oidc.feature.md | ||
| plan-deploy-authentik.doc.md | ||