chore: update forgejo and miniflux secrets

tofu/authentik/main.tf

@@ -42,6 +42,10 @@ resource "authentik_group" "ftp" {
   is_superuser = false
 }
 
+resource "authentik_group" "mediamanager" {
+  name         = "mediamanager"
+  is_superuser = false
+}
 
 module "gitea" {
   source              = "../modules/authentik-oidc"
@@ -235,3 +239,13 @@ module "rustical" {
   redirect_uris       = [{ matching_mode = "strict", url = "https://cal.roboces.dev/frontend/login/oidc/callback" }]
   app_access_group_id = ""
 }
+
+module "mediamanager" {
+  source              = "../modules/authentik-oidc"
+  app_name            = "mediamanager"
+  app_slug            = "mediamanager"
+  client_id           = var.mediamanager_client_id
+  client_secret       = var.mediamanager_client_secret
+  redirect_uris       = [{ matching_mode = "strict", url = "https://mediamanager.roboces.dev/api/v1/auth/oauth/callback" }]
+  app_access_group_id = authentik_group.mediamanager.id
+}

tofu/authentik/sample.env

@@ -1,7 +1,5 @@
 AUTHENTIK_URL=https://auth.fukurokuju.dev
 AUTHENTIK_TOKEN=
-TF_VAR_firezone_client_id=
-TF_VAR_firezone_client_secret=
 TF_VAR_gitea_client_id=
 TF_VAR_gitea_client_secret=
 TF_VAR_miniflux_client_id=
@@ -10,5 +8,10 @@ TF_VAR_portainer_client_id=
 TF_VAR_portainer_client_secret=
 TF_VAR_paperless_client_id=
 TF_VAR_paperless_client_secret=
+TF_VAR_sftpgo_client_id=
+TF_VAR_sftpgo_client_secret=
 TF_VAR_netbird_client_id=
-TF_VAR_netbird_client_secret=
+TF_VAR_rustical_client_id=
+TF_VAR_rustical_client_secret=
+TF_VAR_mediamanager_client_id=
+TF_VAR_mediamanager_client_secret=

tofu/authentik/vars.tf

@@ -56,11 +56,21 @@ variable "sftpgo_client_secret" {
 }
 
 variable "rustical_client_id" {
-  description = "Radicale client ID"
+  description = "Rustical client ID"
   type        = string
 }
 
 variable "rustical_client_secret" {
-  description = "Radicale client secret"
+  description = "Rustical client secret"
+  type        = string
+}
+
+variable "mediamanager_client_id" {
+  description = "MediaManager client ID"
+  type        = string
+}
+
+variable "mediamanager_client_secret" {
+  description = "MediaManager client secret"
   type        = string
 }