fix(immich): remove passwordLogin and set pub

Author: chkpwd

kubernetes/apps/immich/external-secret.yml

@@ -19,7 +19,7 @@ spec:
             externalDomain: https://immich.chkpwd.com
           oauth:
             enabled: true
-            issuerUrl: https://authentik.chkpwd.com/application/o/immich/.well-known/openid-configuration
+            issuerUrl: https://authentik.chkpwd.com/application/o/immich/
             clientId: immich
             clientSecret: "{{ .oidc_client_secret }}"
             scope: openid email profile
@@ -36,6 +36,8 @@ spec:
               enabled: false
           newVersionCheck:
             enabled: false
+          passwordLogin:
+            enabled: false
           storageTemplate:
             enabled: true
             hashVerificationEnabled: true

kubernetes/apps/immich/helm-release.yml

@@ -16,7 +16,6 @@ spec:
         name: immich
         namespace: flux-system
   values:
-    # Shared across the server and machine-learning components.
     controllers:
       main:
         containers:
@@ -58,11 +57,16 @@ spec:
       configurationKind: Secret
     server:
       enabled: true
+      service:
+        main:
+          type: LoadBalancer
+          annotations:
+            lbipam.cilium.io/ips: 10.0.45.38
       route:
         main:
           hostnames: ["immich.chkpwd.com"]
           parentRefs:
-            - name: private
+            - name: public
               namespace: networking
               sectionName: https
       resources: