From c92429cba382487c0c43cf874456af659af9157d Mon Sep 17 00:00:00 2001
From: isabel <isabel@isabelroses.com>
Date: Tue, 3 Dec 2024 22:02:06 +0000
Subject: [PATCH] chore(kanidm): update orignUrls

---
 modules/nixos/services/selfhosted/kanidm.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/modules/nixos/services/selfhosted/kanidm.nix b/modules/nixos/services/selfhosted/kanidm.nix
index 1915afe6a..920a6a3b7 100644
--- a/modules/nixos/services/selfhosted/kanidm.nix
+++ b/modules/nixos/services/selfhosted/kanidm.nix
@@ -115,7 +115,7 @@ in
           systems.oauth2 = {
             grafana = {
               displayName = "Grafana";
-              originUrl = "https://${cfg'.grafana.domain}/";
+              originUrl = "https://${cfg'.grafana.domain}/login/generic_oauth";
               originLanding = "https://${cfg'.grafana.domain}/";
               basicSecretFile = config.age.secrets.kanidm-oauth2-grafana.path;
               preferShortUsername = true;
@@ -136,7 +136,7 @@ in
 
             forgejo = {
               displayName = "Forgejo";
-              originUrl = "https://${cfg'.forgejo.domain}/";
+              originUrl = "https://${cfg'.forgejo.domain}/user/oauth2/kanidm/callback";
               originLanding = "https://${cfg'.forgejo.domain}/";
               basicSecretFile = config.age.secrets.kanidm-oauth2-forgejo.path;
               scopeMaps."forgejo.access" = [