[ci skip] add Homepage widget credentials for Authentik, Shlink, Home Assistant

Wire homepage_credentials tokens through platform stack to enable
live widgets for Authentik, Shlink (URL shortener), and Home Assistant
London. Update SOPS with new credential entries.

stacks/platform/main.tf

@@ -300,6 +300,7 @@ module "authentik" {
   secret_key        = var.authentik_secret_key
   postgres_password = var.authentik_postgres_password
   redis_host        = var.redis_host
+  homepage_token    = try(var.homepage_credentials["authentik"]["token"], "")
 }
 
 # -----------------------------------------------------------------------------
@@ -381,6 +382,7 @@ module "reverse-proxy" {
   tls_secret_name        = var.tls_secret_name
   truenas_homepage_token = var.homepage_credentials["reverse_proxy"]["truenas_token"]
   pfsense_homepage_token = var.homepage_credentials["reverse_proxy"]["pfsense_token"]
+  haos_homepage_token    = try(var.homepage_credentials["home_assistant"]["token"], "")
 }
 
 # -----------------------------------------------------------------------------

stacks/platform/modules/authentik/main.tf

@@ -3,6 +3,11 @@ variable "secret_key" {}
 variable "postgres_password" {}
 variable "tier" { type = string }
 variable "redis_host" { type = string }
+variable "homepage_token" {
+  type      = string
+  default   = ""
+  sensitive = true
+}
 
 
 module "tls_secret" {
@@ -66,6 +71,9 @@ module "ingress" {
     "gethomepage.dev/icon"         = "authentik.png"
     "gethomepage.dev/group"        = "Identity & Security"
     "gethomepage.dev/pod-selector" = ""
+    "gethomepage.dev/widget.type"  = "authentik"
+    "gethomepage.dev/widget.url"   = "http://goauthentik-server.authentik.svc.cluster.local"
+    "gethomepage.dev/widget.key"   = var.homepage_token
   }
 }
 

stacks/platform/modules/reverse_proxy/main.tf

@@ -4,6 +4,11 @@
 variable "tls_secret_name" {}
 variable "truenas_homepage_token" {}
 variable "pfsense_homepage_token" {}
+variable "haos_homepage_token" {
+  type      = string
+  default   = ""
+  sensitive = true
+}
 
 resource "kubernetes_namespace" "reverse-proxy" {
   metadata {
@@ -287,6 +292,9 @@ module "ha-london" {
     "gethomepage.dev/icon"         = "home-assistant.png"
     "gethomepage.dev/group"        = "Smart Home"
     "gethomepage.dev/pod-selector" = ""
+    "gethomepage.dev/widget.type"  = "homeassistant"
+    "gethomepage.dev/widget.url"   = "http://ha-london.viktorbarzin.lan:8123"
+    "gethomepage.dev/widget.key"   = var.haos_homepage_token
   }
 }
 

stacks/url/main.tf

@@ -216,6 +216,9 @@ module "ingress" {
     "gethomepage.dev/icon"         = "shlink.png"
     "gethomepage.dev/group"        = "Productivity"
     "gethomepage.dev/pod-selector" = ""
+    "gethomepage.dev/widget.type"  = "shlink"
+    "gethomepage.dev/widget.url"   = "http://shlink.shlink.svc.cluster.local:8080"
+    "gethomepage.dev/widget.key"   = var.url_shortener_api_key
   }
 }