From 539c8110ddbea2e38c73963d1168e737f954ee07 Mon Sep 17 00:00:00 2001
From: Chris Cowley <chris@cowley.tech>
Date: Tue, 8 Apr 2025 11:06:51 +0200
Subject: [PATCH] Add metube and spotizerr

---
 authentik/metube.tf    | 20 ++++++++++++++++++++
 authentik/outposts.tf  |  3 ++-
 authentik/spotizerr.tf | 42 ++++++++++++++++++++----------------------
 3 files changed, 42 insertions(+), 23 deletions(-)
 create mode 100644 authentik/metube.tf

diff --git a/authentik/metube.tf b/authentik/metube.tf
new file mode 100644
index 0000000..0f7840e
--- /dev/null
+++ b/authentik/metube.tf
@@ -0,0 +1,20 @@
+resource "authentik_provider_proxy" "metube" {
+  name          = "Metube"
+  internal_host = "http://metube.jellyfin:8081"
+  external_host = "https://metube.lab.cowley.tech"
+
+  internal_host_ssl_validation = false
+
+  authentication_flow = data.authentik_flow.default-authentication-flow.id
+  authorization_flow  = data.authentik_flow.default-provider-authorization-implicit-consent.id
+  invalidation_flow   = data.authentik_flow.default-provider-invalidation-flow.id
+
+  access_token_validity = "hours=24"
+}
+
+resource "authentik_application" "metube" {
+  name = "Metube"
+  slug = "metube"
+
+  protocol_provider = authentik_provider_proxy.metube.id
+}
diff --git a/authentik/outposts.tf b/authentik/outposts.tf
index d8fbebb..2739921 100644
--- a/authentik/outposts.tf
+++ b/authentik/outposts.tf
@@ -6,7 +6,8 @@ resource "authentik_outpost" "embedded_outpost" {
     authentik_provider_proxy.pinchflat.id,
     authentik_provider_proxy.paperless-gpt.id,
     #authentik_provider_proxy.proxy-test.id,
-    #authentik_provider_proxy.spotizerr.id,
+    authentik_provider_proxy.spotizerr.id,
+    authentik_provider_proxy.metube.id,
   ]
   service_connection = authentik_service_connection_kubernetes.local.id
 
diff --git a/authentik/spotizerr.tf b/authentik/spotizerr.tf
index 7ac6332..81600c1 100644
--- a/authentik/spotizerr.tf
+++ b/authentik/spotizerr.tf
@@ -1,22 +1,20 @@
-#resource "authentik_provider_proxy" "spotizerr" {
-#  name          = "Spotizerr"
-#  internal_host = "http://spotizerr.jellyfin:7171"
-#  external_host = "https://spotizerr.lab.cowley.tech"
-#
-#  internal_host_ssl_validation = false
-#
-#  authentication_flow = data.authentik_flow.default-authentication-flow.id
-#  authorization_flow  = data.authentik_flow.default-provider-authorization-implicit-consent.id
-#  invalidation_flow   = data.authentik_flow.default-provider-invalidation-flow.id
-#
-#  access_token_validity = "hours=24"
-#}
-#
-#resource "authentik_application" "spotizerr" {
-#  name = "Spotizerr"
-#  slug = "spotizerr"
-#
-#  protocol_provider = authentik_provider_proxy.spotizerr.id
-#}
-#
-#
+resource "authentik_provider_proxy" "spotizerr" {
+  name          = "Spotizerr"
+  internal_host = "http://spotizerr.jellyfin:7171"
+  external_host = "https://spotizerr.lab.cowley.tech"
+
+  internal_host_ssl_validation = false
+
+  authentication_flow = data.authentik_flow.default-authentication-flow.id
+  authorization_flow  = data.authentik_flow.default-provider-authorization-implicit-consent.id
+  invalidation_flow   = data.authentik_flow.default-provider-invalidation-flow.id
+
+  access_token_validity = "hours=24"
+}
+
+resource "authentik_application" "spotizerr" {
+  name = "Spotizerr"
+  slug = "spotizerr"
+
+  protocol_provider = authentik_provider_proxy.spotizerr.id
+}