Merge pull request 'Allow grafana.unkin.net redirect for Grafana' (#43) from benvin/grafana-public-host into main

Reviewed-on: #43

config/providers_oauth2/grafana.yaml

@@ -1,5 +1,5 @@
 # OAuth2/OIDC provider + application for the in-cluster Grafana
-# (grafana.k8s.syd1.au.unkin.net). client_secret is read from Vault, not committed.
+# (grafana.unkin.net). client_secret is read from Vault, not committed.
 name: Grafana
 authorization_flow: default-provider-authorization-implicit-consent
 invalidation_flow: default-provider-invalidation-flow
@@ -13,5 +13,7 @@ scope_mappings:
   - goauthentik.io/providers/oauth2/scope-email
   - goauthentik.io/providers/oauth2/scope-profile
 redirect_uris:
+  - matching_mode: strict
+    url: https://grafana.unkin.net/login/generic_oauth
   - matching_mode: strict
     url: https://grafana.k8s.syd1.au.unkin.net/login/generic_oauth