Simon Bärlocher 3ace667b6c feat(services): refine split-horizon OIDC routing and harden nextcloud patch ... - authentik: address the rewrite service by compose service name instead of a network alias on the public FQDN, which shadowed extra_hosts pins and broke OIDC discovery for c-ares-based (Node) resolvers - homarr: add homarr_extra_hosts to pin the IdP FQDN to a LAN IP so OIDC discovery stays in-network while the issuer matches the browser-facing URL - opnform: add opnform_oidc_sso_redirect_root to 302 the root URL to the SSO path (deep-links untouched, /login?bypass=1 break-glass); restart ingress via container restart so envsubst re-renders nginx.conf - nextcloud: make the UserConfig sed workaround fail loud on upstream drift instead of silently skipping (nextcloud/server#59629) - gitignore: exclude the local .ansible/ collection cache		2026-06-02 13:44:08 +02:00
..
argument_specs.yml	feat(services): refine split-horizon OIDC routing and harden nextcloud patch	2026-06-02 13:44:08 +02:00
main.yml	fix(opnform): address review feedback on vars header and meta boilerplate	2026-05-26 14:58:10 +02:00