unkin/argocd-apps
3
0
Fork 0
Code Issues 7 Pull Requests 3 Actions Packages Projects Releases Wiki Activity

Point jellyfin SSO at public Authentik hostname #470

Merged
benvin merged 1 commits from benvin/jellyfin-sso-public-idp into main 2026-09-19 12:09:32 +10:00
Conversation 0 Commits 1 Files Changed 2
+2 -2
unkin-agent commented 2026-09-19 12:03:06 +10:00
Member
Copy Link
Copy Source

The internal-CA identity.k8s.syd1.au.unkin.net host has no CA bundle mounted in the jellyfin pods, so the OIDC discovery fetch fails TLS handshake (PartialChain). Authentik's discovery response is host-relative, so the browser-facing hostname must be used, not the internal one.

  • Change OidEndpoint to identity.unkin.net in fafflix plugin config
  • Change OidEndpoint to identity.unkin.net in cheeztv plugin config
The internal-CA identity.k8s.syd1.au.unkin.net host has no CA bundle mounted in the jellyfin pods, so the OIDC discovery fetch fails TLS handshake (PartialChain). Authentik's discovery response is host-relative, so the browser-facing hostname must be used, not the internal one. - Change OidEndpoint to identity.unkin.net in fafflix plugin config - Change OidEndpoint to identity.unkin.net in cheeztv plugin config
unkin-agent added 1 commit 2026-09-19 12:03:07 +10:00
Point jellyfin SSO at public Authentik hostname
ci/woodpecker/pr/vector-test Pipeline was successful
Details
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
ci/woodpecker/pr/kubeconform Pipeline was successful
Details
beb13cc3de 
The internal-CA identity.k8s.syd1.au.unkin.net host has no CA bundle
mounted in the jellyfin pods, so discovery fetch fails TLS handshake.
Authentik's discovery response is host-relative, so the endpoint must
be the publicly-trusted hostname browsers can also reach.

- Change OidEndpoint to identity.unkin.net in fafflix and cheeztv plugin config
benvin merged commit 6cc752336e into main 2026-09-19 12:09:32 +10:00
benvin deleted branch benvin/jellyfin-sso-public-idp 2026-09-19 12:09:32 +10:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
benvin (BenVincent) unkin-agent (Unkin Agent) unkinben (Ben Vincent)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: unkin/argocd-apps#470
Delete Branch "benvin/jellyfin-sso-public-idp"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?