From b444a6426b160acb2f8e75133e4a547bb0d18000 Mon Sep 17 00:00:00 2001
From: Claude <claude@eom.dev>
Date: Fri, 6 Nov 2026 20:19:53 -0500
Subject: [PATCH] Dex: add listmonk client for the eom.dev newsletter

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 playbooks/deploy-eom.yml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/playbooks/deploy-eom.yml b/playbooks/deploy-eom.yml
index 6f3342a..268e639 100755
--- a/playbooks/deploy-eom.yml
+++ b/playbooks/deploy-eom.yml
@@ -103,6 +103,13 @@
         redirectURIs:
           - https://nextcloud.eom.dev/apps/user_oidc/code
           - https://nextcloud.eom.dev/index.php/apps/user_oidc/code
+      - id: listmonk
+        name: eom.dev Newsletter
+        secret: "{{ listmonk_dex_client_secret }}"
+        # listmonk only admits e-mails already present as listmonk users.
+        allowedConnectors: [ldap]
+        redirectURIs:
+          - https://listmonk.eom.dev/auth/oidc
     # Per-service gate for clients that cannot check group claims themselves.
     # Same idAttr as the main connector; subjects differ per connector ID.
     dex_additional_connectors: