feat: add docker/oxicloud

tofu/authentik/main.tf

@@ -37,22 +37,6 @@ resource "authentik_group" "arrs" {
   is_superuser = false
 }
 
-resource "authentik_group" "vpn" {
-  name         = "vpn"
-  is_superuser = false
-}
-
-resource "authentik_group" "ftp" {
-  name         = "ftp"
-  is_superuser = false
-}
-
-resource "authentik_group" "mediamanager" {
-  name         = "mediamanager"
-  is_superuser = false
-}
-
-
 module "gitea" {
   source              = "../modules/authentik-oidc"
   app_name            = "Gitea"
@@ -181,30 +165,6 @@ module "prowlarr" {
   internal_host_ssl_validation = false
 }
 
-module "sftpgo" {
-  source              = "../modules/authentik-oidc"
-  app_name            = "SFTPGo"
-  app_slug            = "SFTPGo"
-  client_id           = var.sftpgo_client_id
-  client_secret       = var.sftpgo_client_secret
-  client_type         = "confidential"
-  app_access_group_id = authentik_group.ftp.id
-  redirect_uris = [
-    {
-      matching_mode = "regex",
-      url           = "https://ftp.fukurokuju.dev/.*"
-    }
-  ]
-  extra_property_mappings = [
-
-  ]
-  app_icon              = "https://ftp.fukurokuju.dev/static/img/logo.png"
-  access_token_validity = "days=10"
-  app_url               = "https://ftp.fukurokuju.dev"
-  app_description       = "SFTPGo"
-  sub_mode              = "user_username"
-}
-
 module "rustical" {
   source              = "../modules/authentik-oidc"
   app_name            = "rustical"
@@ -272,3 +232,17 @@ module "pulse" {
   redirect_uris       = [{ matching_mode = "strict", url = "https://pulse.fukurokuju.dev/api/oidc/callback" }]
   app_access_group_id = authentik_group.admins.id
 }
+
+module "cloud" {
+  source        = "../modules/authentik-oidc"
+  app_name      = "Cloud"
+  app_slug      = "cloud"
+  app_url       = "https://cloud.roboces.dev"
+  client_id     = var.oxicloud_client_id
+  client_secret = var.oxicloud_client_secret
+  app_icon      = "https://cloud.roboces.dev/themes/opencloud/assets/favicon.svg"
+  redirect_uris = [{
+    matching_mode = "strict", url = "https://cloud.roboces.dev/api/auth/oidc/callback"
+  }]
+  app_access_group_id = ""
+}

tofu/authentik/sample.env

@@ -18,3 +18,5 @@ TF_VAR_ganymede_client_id=
 TF_VAR_ganymede_client_secret=
 TF_VAR_pulse_client_id=
 TF_VAR_pulse_client_secret=
+TF_VAR_oxicloud_client_id=aef61f77326b813cf8d8ba71d1ac994b5642685ca37e4710ab0079e91d87702d55fd9775d473b05aff45603bf08e78dba26850af3a815f3c3ac171d163368aa0
+TF_VAR_oxicloud_client_secret=a4038df17c9fd06f86372aeaaae8f3fd1374d8978983af7b398d948ef15d1efe522a1faa2fc7652bc410c516d96cd2e4211dad4e05ba6297bdd8d9090460d5fc

tofu/authentik/vars.tf

@@ -88,3 +88,13 @@ variable "pulse_client_secret" {
   description = "Pulse client secret"
   type        = string
 }
+
+variable "oxicloud_client_id" {
+  description = "Oxicloud client ID"
+  type        = string
+}
+
+variable "oxicloud_client_secret" {
+  description = "Oxicloud client secret"
+  type        = string
+}