catalin/fukuops
1
0
Fork 1
Code Issues Pull requests 2 Releases Packages 1 Activity

chore(deps): update terraform authentik to v2024.10.2
Some checks failed
checks / pre-commit (push) Failing after 5s
Details
checks / k8s (push) Failing after 2s
Details
checks / tflint (push) Failing after 2s
Details
Kaniko deployments / nextcloud (push) Failing after 3s
Details
OpenTofu deployments / authentik (push) Failing after 2s
Details
OpenTofu deployments / adguard (push) Failing after 2s
Details

Browse source
This commit is contained in:
cătălin 2024-11-26 20:06:33 +01:00
commit 96843e24b9
No known key found for this signature in database
5 changed files with 64 additions and 53 deletions
Download patch file Download diff file Expand all files Collapse all files

58
tofu/authentik/main.tf
View file

@ -8,7 +8,7 @@ terraform {
required_providers {
authentik = {
source = "goauthentik/authentik"
version = "2024.10.1"
version = "2024.10.2"
}
}
}
@ -40,7 +40,7 @@ module "gitea" {
client_id = var.gitea_client_id
client_secret = var.gitea_client_secret
app_access_group_id = ""
redirect_uris = ["https://git.roboces.dev/user/oauth2/authentik/callback"]
redirect_uris = [{ matching_mode = "strict", url = "https://git.roboces.dev/user/oauth2/authentik/callback" }]
app_icon = "https://git.roboces.dev/assets/img/logo.svg"
app_description = "Beyond coding. We forge."
app_publisher = "Forgejo"
@ -55,12 +55,21 @@ module "miniflux" {
client_id = var.miniflux_client_id
client_secret = var.miniflux_client_secret
app_access_group_id = ""
redirect_uris = ["https://feeds.roboces.dev/oauth2/oidc/callback", "https://feeds.fuku/oauth2/oidc/callback"]
app_icon = "https://miniflux.app/favicon.ico"
app_description = "RSS aggregator"
app_publisher = "Miniflux"
app_url = "https://feeds.roboces.dev"
sub_mode = "hashed_user_id"
redirect_uris = [
{
matching_mode = "strict",
url = "https://feeds.roboces.dev/oauth2/oidc/callback"
},
{
matching_mode = "strict",
url = "https://feeds.fuku/oauth2/oidc/callback"
}
]
app_icon = "https://miniflux.app/favicon.ico"
app_description = "RSS aggregator"
app_publisher = "Miniflux"
app_url = "https://feeds.roboces.dev"
sub_mode = "hashed_user_id"
}
module "portainer" {
@ -71,7 +80,10 @@ module "portainer" {
client_secret = var.portainer_client_secret
app_access_group_id = authentik_group.admins.id
redirect_uris = [
"https://containers.fukurokuju.dev/"
{
matching_mode = "strict",
url = "https://containers.fukurokuju.dev/"
}
]
app_icon = "https://www.portainer.io/hubfs/crane-icon.svg"
app_description = "Kubernetes and Docker container Management Software"
@ -87,11 +99,13 @@ module "paperless" {
client_id = var.paperless_client_id
client_secret = var.paperless_client_secret
app_access_group_id = ""
redirect_uris = ["https://paperless.roboces.dev/accounts/oidc/authentik/login/callback/"]
app_icon = "https://paperless.roboces.dev/favicon.ico"
app_description = "Document manager"
app_publisher = "Paperless"
app_url = "https://paperless.roboces.dev"
redirect_uris = [
{ matching_mode = "strict", url = "https://paperless.roboces.dev/accounts/oidc/authentik/login/callback/" }
]
app_icon = "https://paperless.roboces.dev/favicon.ico"
app_description = "Document manager"
app_publisher = "Paperless"
app_url = "https://paperless.roboces.dev"
}
module "sonarr" {
@ -136,9 +150,19 @@ module "netbird" {
client_type = "public"
app_access_group_id = authentik_group.vpn.id
redirect_uris = [
"https://vpn.fukurokuju.dev",
"https://vpn.fukurokuju.dev.*",
"http://localhost:53000"
{
matching_mode = "strict",
url = "https://vpn.fukurokuju.dev",
},
{
matching_mode = "regex",
url = "https://vpn.fukurokuju.dev.*",
},
{
matching_mode = "strict",
url = "http://localhost:53000"
},
]
sub_mode = "user_id"
extra_property_mappings = [