bootstrapping guidance ui and missing stuff

sso-mfa/k8s/keycape/create-secrets.sh

@@ -80,7 +80,13 @@ lldap:
   baseDN: "dc=netkingdom,dc=local"
 
 authelia:
+  # Cluster-internal URL for server-side token exchange.
   baseURL: "http://authelia.sso.svc.cluster.local:9091"
+  # Browser-facing URL. KeyCape redirects the user's browser here for the
+  # upstream Authelia password step, so this must not be the cluster-internal
+  # service URL.
+  browserBaseURL: "https://auth.coulomb.social"
+  tokenBaseURL: "http://authelia.sso.svc.cluster.local:9091"
   clientId: "keycape"
   clientSecret: "${AUTHELIA_CLIENT_SECRET}"
   redirectURI: "https://kc.coulomb.social/authorize/callback"
@@ -98,10 +104,20 @@ clients:
     displayName: "Demo Application"
     redirectUris:
       - "http://localhost:3000/callback"
+      - "http://127.0.0.1:8876/oidc/callback"
+      - "http://localhost:8876/oidc/callback"
       - "https://demo.coulomb.social/callback"
     allowedScopes: ["openid", "profile", "email", "groups"]
     grantTypes: ["authorization_code"]
     clientType: "public"
+  - clientId: "netkingdom-bootstrap-console"
+    displayName: "NetKingdom Bootstrap Console"
+    redirectUris:
+      - "http://127.0.0.1:8876/oidc/callback"
+      - "http://localhost:8876/oidc/callback"
+    allowedScopes: ["openid", "profile", "email", "groups"]
+    grantTypes: ["authorization_code"]
+    clientType: "public"
 EOF
 )