feat(infra): update Homarr dashboard to v1.68.0 and align manifests

- Update container image to ghcr.io/homarr-labs/homarr:v1.68.0
- Change namespace from services to homarr across deployment, service, and pvc
- Set volume mount path to /appdata and storage capacity to 2Gi with local-path
- Inject OIDC environment variables for SSO authentication

Build: 0 jobs, 0 errors

4-Infrastructure/k3s-flake/manifests/homarr/deployment.yaml

@@ -2,7 +2,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: homarr
-  namespace: services
+  namespace: homarr
   labels:
     app: homarr
 spec:
@@ -17,18 +17,33 @@ spec:
     spec:
       containers:
         - name: homarr
-          image: ghcr.io/homarr-labs/homarr:v1.62.0
+          image: ghcr.io/homarr-labs/homarr:v1.68.0
           ports:
             - containerPort: 7575
           volumeMounts:
             - name: data
-              mountPath: /app/data
+              mountPath: /appdata
           env:
             - name: HOMARR_ALLOW_ANALYTICS
               value: "false"
             - name: SECRET_ENCRYPTION_KEY
               value: "93776b84d86fbc810709cf7cf9b243afbb2b9cb19603af8b1a696373467dc583"
+            - name: AUTH_PROVIDERS
+              value: "credentials,oidc"
+            - name: AUTH_OIDC_CLIENT_ID
+              value: "sso-homarr"
+            - name: AUTH_OIDC_CLIENT_SECRET
+              value: "2e1170ceb4589ca7f67e78b8460ed573c55e26d8cba5a1921b861fff905557da"
+            - name: AUTH_OIDC_ISSUER
+              value: "https://auth.researchstack.info/application/o/homarr/"
+            - name: AUTH_OIDC_URI
+              value: "https://auth.researchstack.info/application/o/authorize/"
+            - name: AUTH_OIDC_CLIENT_NAME
+              value: "Authentik"
+            - name: AUTH_OIDC_AUTO_LOGIN
+              value: "true"
       volumes:
         - name: data
           persistentVolumeClaim:
             claimName: homarr-data
+

4-Infrastructure/k3s-flake/manifests/homarr/pvc.yaml

@@ -2,10 +2,13 @@ apiVersion: v1
 kind: PersistentVolumeClaim
 metadata:
   name: homarr-data
-  namespace: services
+  namespace: homarr
 spec:
   accessModes:
     - ReadWriteOnce
   resources:
     requests:
-      storage: 1Gi
+      storage: 2Gi
+  storageClassName: local-path
+
+

4-Infrastructure/k3s-flake/manifests/homarr/service.yaml

@@ -2,7 +2,7 @@ apiVersion: v1
 kind: Service
 metadata:
   name: homarr
-  namespace: services
+  namespace: homarr
 spec:
   type: NodePort
   selector:
@@ -11,3 +11,4 @@ spec:
     - port: 7575
       targetPort: 7575
       nodePort: 30805
+