feat: add ganymede

tofu/authentik/main.tf

@@ -22,6 +22,11 @@ resource "authentik_group" "ci" {
   users = [data.authentik_user.catalin.id]
 }
 
+resource "authentik_group" "vods" {
+  name  = "vods"
+  users = [data.authentik_user.catalin.id]
+}
+
 resource "authentik_group" "admins" {
   name         = "authentik Admins"
   is_superuser = true
@@ -204,6 +209,8 @@ module "rustical" {
   source              = "../modules/authentik-oidc"
   app_name            = "rustical"
   app_slug            = "rustical"
+  app_url             = "https://cal.roboces.dev"
+  app_icon            = "https://cal.roboces.dev/favicon.ico"
   client_id           = var.rustical_client_id
   client_secret       = var.rustical_client_secret
   redirect_uris       = [{ matching_mode = "strict", url = "https://cal.roboces.dev/frontend/login/oidc/callback" }]
@@ -216,6 +223,8 @@ module "jellyfin" {
   app_slug            = "jellyfin"
   base_dn             = "DC=ldap,DC=fukurokuju,DC=dev"
   name                = "jellyfin"
+  app_url             = "https://jelly.roboces.dev"
+  app_icon            = "https://jelly.roboces.dev/favicon.ico"
   app_access_group_id = authentik_group.arrs.id
 }
 
@@ -224,7 +233,21 @@ module "tandoor" {
   app_name            = "Tandoor"
   app_slug            = "tandoor"
   app_access_group_id = ""
+  app_url             = "https://recipes.roboces.dev"
   redirect_uris       = [{ matching_mode = "strict", url = "https://recipes.roboces.dev/accounts/oidc/authentik/login/callback/" }]
+  app_icon            = "https://recipes.roboces.dev/favicon.icon"
   client_id           = var.tandoor_client_id
   client_secret       = var.tandoor_client_secret
 }
+
+module "ganymede" {
+  source              = "../modules/authentik-oidc"
+  app_name            = "Ganymede"
+  app_slug            = "ganymede"
+  redirect_uris       = [{ matching_mode = "strict", url = "https://vods.roboces.dev/api/v1/auth/oauth/callback" }]
+  client_id           = var.ganymede_client_id
+  client_secret       = var.ganymede_client_secret
+  app_url             = "https://vods.roboces.dev"
+  app_icon            = "https://vods.roboces.dev/favicon.ico"
+  app_access_group_id = authentik_group.vods.id
+}

tofu/authentik/sample.env

@@ -14,3 +14,5 @@ TF_VAR_rustical_client_id=
 TF_VAR_rustical_client_secret=
 TF_VAR_tandoor_client_id=
 TF_VAR_tandoor_client_secret=
+TF_VAR_ganymede_client_id=
+TF_VAR_ganymede_client_secret=

tofu/authentik/vars.tf

@@ -68,3 +68,13 @@ variable "tandoor_client_secret" {
   description = "Tandoor client secret"
   type        = string
 }
+
+variable "ganymede_client_id" {
+  description = "Ganymede client ID"
+  type        = string
+}
+
+variable "ganymede_client_secret" {
+  description = "Ganymede client secret"
+  type        = string
+}