feat: add netbird docker

tofu/authentik/main.tf

@@ -27,6 +27,11 @@ resource "authentik_group" "admins" {
   is_superuser = true
 }
 
+resource "authentik_group" "vpn" {
+  name         = "vpn"
+  is_superuser = false
+}
+
 
 module "firezone" {
   source              = "../modules/authentik-oidc"
@@ -52,7 +57,7 @@ module "gitea" {
   app_access_group_id = ""
   redirect_uris       = ["https://git.roboces.dev/user/oauth2/authentik/callback"]
   app_icon            = "https://git.roboces.dev/assets/img/logo.svg"
-  app_description     = "Beyond coding. We forge. "
+  app_description     = "Beyond coding. We forge."
   app_publisher       = "Forgejo"
   app_url             = "https://git.roboces.dev/user/oauth2/authentik"
   sub_mode            = "hashed_user_id"
@@ -136,3 +141,22 @@ module "lidarr" {
   internal_host_ssl_validation = false
   app_icon                     = "https://lidarr.audio/img/background/logo.png"
 }
+
+module "netbird" {
+  source              = "../modules/authentik-oidc"
+  app_name            = "netbird"
+  app_slug            = "netbird"
+  client_id           = var.netbird_client_id
+  client_secret       = var.netbird_client_secret
+  client_type         = "public"
+  app_access_group_id = authentik_group.vpn.id
+  redirect_uris = [
+    "https://vpn.fukurokuju.dev",
+    "https://vpn.fukurokuju.dev.*",
+    "http://localhost:53000"
+  ]
+  sub_mode = "user_id"
+  extra_property_mappings = [
+    "goauthentik.io/providers/oauth2/scope-authentik_api"
+  ]
+}