fix es

Author: joryirving

kubernetes/apps/base/llm/dashclaw/externalsecret.yaml

@@ -14,7 +14,7 @@ spec:
       data:
         # OAUTH
         OIDC_DISPLAY_NAME: Authentik
-        OIDC_ISSUER_URL: https://sso.jory.dev/application/o/dashclaw/.well-known/openid-configuration
+        OIDC_ISSUER_URL: https://sso.jory.dev/application/o/dashclaw/
         OIDC_CLIENT_ID: "{{ .DASHCLAW_CLIENT_ID }}"
         OIDC_CLIENT_SECRET: "{{ .DASHCLAW_CLIENT_SECRET }}"
         NEXTAUTH_SECRET: "{{ .NEXTAUTH_SECRET }}"

terraform/authentik/applications.tofu

@@ -49,7 +49,7 @@ locals {
       group             = "media"
       icon_url          = "https://raw.githubusercontent.com/homarr-labs/dashboard-icons/main/png/openclaw.png"
       redirect_uri      = "https://dashclaw.${var.CLUSTER_DOMAIN}/api/auth/callback/oidc"
-      launch_url        = "https://dashclaw.${var.CLUSTER_DOMAIN}"
+      launch_url        = "https://dashclaw.${var.CLUSTER_DOMAIN}/login"
       property_mappings = local.default_property_mappings
     },
     ErsatzTV = {