Hybrid cloud cluster monorepo with Ansible, K8s, NixOS, and Terraform.
cute.haus
ansible
terraform
nix
k8s
ansible: update immich mobile auth
Aly Raffauf
(Jul 7, 2026, 3:59 PM EDT)
e6a766e2
be7479d8
+6
-4
+6
-4
ansible/playbooks/vars/oidc-clients.yml
+6
-4
ansible/playbooks/vars/oidc-clients.yml
···
29
29
pkceEnabled: false
30
30
integration: forward-auth
31
31
32
-
# immich runs on jubilife (NixOS), not k8s — no integration task. Read
33
-
# creds from the oidc-client-immich K8s Secret and feed them into the
34
-
# immich NixOS module via sops.
32
+
# immich runs in k3s (moved off NixOS in b524c29c). No integration task —
33
+
# OAuth creds live in the immich-config / immich-env SOPS secrets and are
34
+
# wired into the chart manually (OIDC client config is baked into
35
+
# config.json, not env-driven).
35
36
- slug: immich
36
37
name: Immich
37
38
logoUrl: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/immich.png
38
39
launchURL: https://immich.cute.haus/
39
40
callbackURLs:
40
41
- https://immich.cute.haus/auth/login
41
-
- app.immich:/
42
+
- https://immich.cute.haus/user-settings
43
+
- app.immich:///oauth-callback
42
44
isPublic: false
43
45
pkceEnabled: true
44
46