[ci skip] fix broken Homepage widgets + add service API tokens to SOPS

- Grafana: fix service URL (grafana not monitoring-grafana)
- Uptime Kuma: remove widget (no status page configured)
- Speedtest/Frigate/Immich: use internal k8s service URLs (external
  goes through Authentik forward auth, blocking API calls)
- pfSense: clean up annotations
- SOPS: add headscale, prowlarr, changedetection, audiobookshelf tokens

stacks/frigate/main.tf

@@ -251,7 +251,7 @@ module "ingress" {
     "gethomepage.dev/group"        = "Media & Entertainment"
     "gethomepage.dev/pod-selector" = ""
     "gethomepage.dev/widget.type"  = "frigate"
-    "gethomepage.dev/widget.url"   = "http://frigate.frigate.svc.cluster.local:5000"
+    "gethomepage.dev/widget.url"   = "http://frigate.frigate.svc.cluster.local"
   }
 }
 

stacks/immich/main.tf

@@ -595,7 +595,7 @@ module "ingress-immich" {
     "gethomepage.dev/name"         = "Immich"
     "gethomepage.dev/group"        = "Media & Entertainment"
     "gethomepage.dev/widget.type"  = "immich"
-    "gethomepage.dev/widget.url"   = "https://immich.viktorbarzin.me"
+    "gethomepage.dev/widget.url"   = "http://immich-server.immich.svc.cluster.local:2283"
     "gethomepage.dev/pod-selector" = ""
     "gethomepage.dev/widget.key"   = var.homepage_credentials["immich"]["token"]
   }

stacks/platform/modules/monitoring/grafana_chart_values.yaml

@@ -25,7 +25,7 @@ ingress:
     gethomepage.dev/group: "Core Platform"
     gethomepage.dev/pod-selector: ""
     gethomepage.dev/widget.type: "grafana"
-    gethomepage.dev/widget.url: "http://monitoring-grafana.monitoring.svc.cluster.local"
+    gethomepage.dev/widget.url: "http://grafana.monitoring.svc.cluster.local"
     gethomepage.dev/widget.username: "admin"
     gethomepage.dev/widget.password: "${grafana_admin_password}"
   tls:

stacks/platform/modules/reverse_proxy/main.tf

@@ -41,12 +41,10 @@ module "pfsense" {
     "gethomepage.dev/widget.type" : "pfsense"
     "gethomepage.dev/widget.version" : "2"
     "gethomepage.dev/widget.url" : "https://10.0.20.1"
-    # "gethomepage.dev/widget.token"    = var.homepage_token
     "gethomepage.dev/widget.username" : "admin"
     "gethomepage.dev/widget.password" : var.pfsense_homepage_token
     "gethomepage.dev/widget.fields" = "[\"load\", \"memory\", \"wanStatus\", \"disk\"]"
     "gethomepage.dev/widget.wan"    = "vmx0"
-    # "gethomepage.dev/pod-selector" : ""
   }
   depends_on     = [kubernetes_namespace.reverse-proxy]
   rybbit_site_id = "b029580e5a7c"

stacks/platform/modules/uptime-kuma/main.tf

@@ -151,9 +151,6 @@ module "ingress" {
     "gethomepage.dev/group"       = "Core Platform"
     "gethomepage.dev/icon" : "uptime-kuma.png"
     "gethomepage.dev/name"         = "Uptime Kuma"
-    "gethomepage.dev/widget.type"  = "uptimekuma"
-    "gethomepage.dev/widget.url"   = "https://uptime.viktorbarzin.me"
-    "gethomepage.dev/widget.slug"  = "cluster-internal"
     "gethomepage.dev/pod-selector" = ""
   }
   rybbit_site_id = "8fef77b1f7fe"

stacks/speedtest/main.tf

@@ -180,7 +180,7 @@ module "ingress" {
     "gethomepage.dev/icon"         = "speedtest-tracker.png"
     "gethomepage.dev/group"        = "Infrastructure"
     "gethomepage.dev/widget.type"  = "speedtest"
-    "gethomepage.dev/widget.url"   = "https://speedtest.viktorbarzin.me"
+    "gethomepage.dev/widget.url"   = "http://speedtest.speedtest.svc.cluster.local"
     "gethomepage.dev/pod-selector" = ""
   }
 }