From ca04fa9043f9dab3fa7c1107bbc7bf474060a81a Mon Sep 17 00:00:00 2001
From: Ian Keane <ian@keane.sh>
Date: Mon, 24 Aug 2026 18:51:16 -0400
Subject: [PATCH] Fix trusted origins for kan

---
 charts/kan/templates/external-secret.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/charts/kan/templates/external-secret.yaml b/charts/kan/templates/external-secret.yaml
index 1cb8069..2861fb0 100644
--- a/charts/kan/templates/external-secret.yaml
+++ b/charts/kan/templates/external-secret.yaml
@@ -16,6 +16,7 @@ spec:
       data:
         BETTER_AUTH_SECRET: "{{ `{{ .better_auth_secret }}` }}"
         POSTGRES_URL: "postgresql://postgres:{{ `{{ .postgres_password }}` }}@postgres.postgres.svc.cluster.local:5432/kan?sslmode=disable"
+        BETTER_AUTH_TRUSTED_ORIGINS: "https://todo.{{ .Values.domain }}"
         SMTP_HOST: "{{ `{{ .ses_smtp_endpoint }}` }}"
         SMTP_PORT: "587"
         SMTP_USER: "{{ `{{ .ses_smtp_user }}` }}"