feat: add automation scripts for checking and managing remote DNS and SSO services

scripts/update_pihole_launch_urls.py

@@ -0,0 +1,53 @@
+import urllib.request
+import ssl
+import json
+import sys
+
+sys.stdout.reconfigure(encoding='utf-8')
+
+ctx = ssl.create_default_context()
+ctx.check_hostname = False
+ctx.verify_mode = ssl.CERT_NONE
+
+token = "SnarfNetPermanentAutomationToken2026"
+headers = {
+    "Authorization": f"Bearer {token}",
+    "Content-Type": "application/json"
+}
+
+def api_call(url, method="GET", payload=None):
+    data = json.dumps(payload).encode('utf-8') if payload else None
+    req = urllib.request.Request(url, headers=headers, data=data, method=method)
+    try:
+        with urllib.request.urlopen(req, context=ctx, timeout=8) as resp:
+            return json.loads(resp.read().decode('utf-8'))
+    except urllib.error.HTTPError as e:
+        err = e.read().decode('utf-8')
+        print(f"API Error {e.code} on {method} {url}: {err}")
+        return None
+
+print("Updating Pi-hole launch URLs in Authentik App Library...")
+
+apps_update = [
+    {
+        "slug": "pihole1",
+        "meta_launch_url": "https://pihole1.snarfnet.net/admin/"
+    },
+    {
+        "slug": "pihole2",
+        "meta_launch_url": "https://pihole2.snarfnet.net/admin/"
+    }
+]
+
+for app in apps_update:
+    slug = app['slug']
+    res = api_call(f"https://authentik.snarfnet.net/api/v3/core/applications/{slug}/", method="PATCH", payload=app)
+    if res:
+        print(f"  ✓ Updated {slug} meta_launch_url to {res.get('meta_launch_url')}")
+
+print("\nVerifying final state in Authentik:")
+final_apps = api_call("https://authentik.snarfnet.net/api/v3/core/applications/?page_size=100")
+for a in sorted(final_apps.get('results', []), key=lambda x: x['name']):
+    if a['slug'] in ['pihole1', 'pihole2', 'dns1', 'dns2']:
+        print(f"  [{a['group']}] {a['name']}")
+        print(f"    Slug: {a['slug']} | Launch URL: {a['meta_launch_url']}")