fix: meet external-api route, drive media proxy, alertbot, misc tweaks

- Meet: add external-api backend path, CSRF trusted origins
- Drive: fix media proxy regex for preview URLs and S3 key signing
- OpenBao: enable Prometheus telemetry
- Postgres alerts: fix metric name (cnpg_backends_total)
- Gitea: bump memory limits for mirror workloads
- Alertbot: expanded deployment config
- Kratos: add find/cal/projects to allowed return URLs, settings path
- Pingora: meet external-api route fix
- Sol: config update
This commit is contained in:
2026-03-25 18:01:15 +00:00
parent eab91eb85d
commit 9f15f5099e
10 changed files with 139 additions and 31 deletions

View File

@@ -12,3 +12,10 @@ data:
DB_USER: meet
AWS_STORAGE_BUCKET_NAME: sunbeam-meet
LIVEKIT_API_URL: https://livekit.DOMAIN_SUFFIX
EXTERNAL_API_ENABLED: "True"
# Resource server settings for CLI bearer token auth.
# Override defaults (ES256 + encrypted) to match Hydra's RS256 + opaque tokens.
OIDC_RS_SIGNING_ALGO: RS256
OIDC_RS_SCOPES: openid,email,profile,offline_access
OIDC_RS_ENCRYPTION_ALGO: ""
OIDC_RS_ENCRYPTION_ENCODING: ""