From d9f4d9c560931f336c5a0c764683c55b829f8d48 Mon Sep 17 00:00:00 2001
From: Morten Olsen <fbtijfdq@void.black>
Date: Fri, 10 Oct 2025 12:33:05 +0200
Subject: [PATCH] fix: metamcp oidc

---
 charts/apps/metamcp/templates/client.yaml     | 8 ++++----
 charts/apps/metamcp/templates/deployment.yaml | 6 ++++--
 2 files changed, 8 insertions(+), 6 deletions(-)

diff --git a/charts/apps/metamcp/templates/client.yaml b/charts/apps/metamcp/templates/client.yaml
index 60befa2..ab8a59b 100644
--- a/charts/apps/metamcp/templates/client.yaml
+++ b/charts/apps/metamcp/templates/client.yaml
@@ -1,10 +1,10 @@
 apiVersion: homelab.mortenolsen.pro/v1
 kind: OidcClient
 metadata:
-  name: '{{ .Release.Name }}'
+  name: "{{ .Release.Name }}"
 spec:
-  environment: '{{ .Values.globals.environment }}'
+  environment: "{{ .Values.globals.environment }}"
   redirectUris:
-    - path: /api/auth/oidc/callback
-      subdomain: '{{ .Values.subdomain }}'
+    - path: api/auth/oauth2/callback/oidc
+      subdomain: "{{ .Values.subdomain }}"
       matchingMode: strict
diff --git a/charts/apps/metamcp/templates/deployment.yaml b/charts/apps/metamcp/templates/deployment.yaml
index 0dfcaf5..c2f1e30 100644
--- a/charts/apps/metamcp/templates/deployment.yaml
+++ b/charts/apps/metamcp/templates/deployment.yaml
@@ -38,6 +38,8 @@ spec:
               value: "https://{{ .Values.subdomain }}.{{ .Values.globals.domain }}"
             - name: NEXT_PUBLIC_APP_URL
               value: "https://{{ .Values.subdomain }}.{{ .Values.globals.domain }}"
+            - name: BETTER_AUTH_URL
+              value: "https://{{ .Values.subdomain }}.{{ .Values.globals.domain }}"
             - name: BETTER_AUTH_SECRET
               valueFrom:
                 secretKeyRef:
@@ -73,8 +75,6 @@ spec:
                 secretKeyRef:
                   name: "{{ .Release.Name }}-pg-connection"
                   key: password
-            - name: OIDC_PROVIDER_ID
-              value: oidc
             - name: OIDC_SCOPES
               value: openid email profile
             - name: OIDC_PKCE
@@ -94,6 +94,8 @@ spec:
                 secretKeyRef:
                   name: "{{ .Release.Name }}-client"
                   key: configuration
+            - name: OIDC_AUTHORIZATION_URL
+              value: "https://authentik.{{ .Values.globals.domain }}/application/o/authorize/"
       volumes:
         - name: data
           persistentVolumeClaim: