shaandClaude Opus 5 f0d7c1f474 traefik-forward-auth: send PKCE code_challenge, default on
Pocket ID rejects the authorization request outright when its OIDC client
has PKCE required -- "This client requires PKCE, but the 'code_challenge'
parameter is missing" -- which is the default for clients created in recent
Pocket ID versions. Every app behind the portal fails at login, not just
the one being tested.

Upstream supports this via the pocketID provider's enablePKCE flag; the
chart never emitted it, so it stayed at its false default. Adds it to the
normalised portal shape (per-portal override via portals[].pocketID.enablePKCE)
and defaults it on, since PKCE is harmless when the client does not require it.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
2026-09-22 02:39:14 +03:00
2026-09-13 13:14:08 +03:00
2026-08-23 13:22:56 +03:00
2026-09-22 02:04:54 +03:00

Shadoll Helm Charts

A collection of custom and optimized Helm charts for self-hosted applications on Kubernetes.

Repository Structure

  • /<chart-name>: Individual application charts (e.g. jellyfin, home-assistant, esphome).
  • /docs: Detailed application documentation and guides.

Quick Start

1. Clone the repository

git clone https://github.com/shadoll/helm-charts.git
cd helm-charts

2. Available Charts

Chart Description Status
Jellyfin Media server with PostgreSQL support Ready
Home Assistant Home automation with PostgreSQL recorder and managed secrets Ready
ESPHome ESPHome dashboard with host network for device discovery Ready
Frigate NVR with Rockchip RK3588 hardware acceleration (rkmpp + rknn) Ready

3. Usage with FluxCD

To use these charts in a FluxCD environment, add the repository as a Source:

apiVersion: source.toolkit.fluxcd.io/v1
kind: GitRepository
metadata:
  name: shadoll-charts
  namespace: flux-system
spec:
  interval: 1h
  url: https://github.com/shadoll/helm-charts
  ref:
    branch: main

Then reference the chart in your HelmRelease:

spec:
  chart:
    spec:
      chart: ./jellyfin
      sourceRef:
        kind: GitRepository
        name: shadoll-charts

Maintenance

To enable automated Signal alerts for chart updates, configure the following GitHub Secrets in this repository:

  • SIGNAL_URL: The full URL to your Signal gateway (e.g. https://signal.h.shadoll.dev/v2/send).
  • SIGNAL_SENDER: The phone number used to send the message.
  • SIGNAL_RECIPIENT: The phone number(s) to receive the alert.

© 2026 Shadoll. Managed with ❤️ for the Home Lab.

S
Description
No description provided
Readme
553 KiB
Languages
Go Template 59.1%
Shell 40.9%