infra/stacks/tripit
Viktor Barzin e5bb16e02a
Some checks failed
ci/woodpecker/push/default Pipeline failed
feat(tripit): activate TripIt-native session auth — signing key + Authentik web redirect (ADR-0028 #90)
Adds SESSION_SIGNING_KEY (Vault secret/tripit -> tripit-secrets ExternalSecret -> env_from) so TripIt's own session JWTs are signed with a real key (the app fails closed under the dev default until this lands), and adds the website OIDC redirect URI https://tripit.viktorbarzin.me/api/auth/callback/authentik to the public tripit-app provider so 'Log in with Authentik' works. Reuses the Shell's existing public OAuth2 app.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-19 06:06:43 +00:00
..
authentik.tf feat(tripit): activate TripIt-native session auth — signing key + Authentik web redirect (ADR-0028 #90) 2026-06-19 06:06:43 +00:00
main.tf feat(tripit): activate TripIt-native session auth — signing key + Authentik web redirect (ADR-0028 #90) 2026-06-19 06:06:43 +00:00
terragrunt.hcl fix: restore tree dropped by 6d224861; land stem95su gdrive-sync (10m) [ci skip] 2026-06-09 08:45:33 +00:00