From 992b164831ca0474efc733811fee2239fead5ae1 Mon Sep 17 00:00:00 2001
From: Alexander Rogov <i_am@rogov.al>
Date: Sun, 12 Jul 2026 20:12:04 +0300
Subject: [PATCH] mastodon mas

---
 argocd/apps/mastodon.yaml | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/argocd/apps/mastodon.yaml b/argocd/apps/mastodon.yaml
index 80ee41b..9de13ba 100644
--- a/argocd/apps/mastodon.yaml
+++ b/argocd/apps/mastodon.yaml
@@ -78,6 +78,21 @@ spec:
               username: dummy
               password: dummy
 
+          externalAuth:
+            oidc:
+              enabled: true
+              displayName: "t0rt1k.tech matrix"
+              issuer: https://auth.t0rt1k.tech/oauth2/
+              discovery: true
+              scope: "openid,profile"
+              uidField: sub
+              clientId: 01KXBMX4RKEYG24GW7ZXXHFD01
+              clientSecret: o9GCnfhbw1jFaTPwJ4vm
+              redirectUri: https://mastodon.t0rt1k.tech/auth/auth/openid_connect/callback
+              assumeEmailIsVerified: false
+            oauthGlobal:
+              omniauthOnly: true
+
           postgresql:
             hostname: shared-pg-rw.cnpg.svc.cluster.local
             port: 5432