From 5be4f93de5d7e468355d7b285951c6d4fab5870d Mon Sep 17 00:00:00 2001
From: Chris Cowley <chris@cowley.tech>
Date: Wed, 2 Apr 2025 14:31:04 +0000
Subject: [PATCH] stuff

---
 authentik/.nextcloud.tf.swp | Bin 12288 -> 0 bytes
 authentik/chat.tf           |  23 ++++++++++++++++++++++-
 authentik/outposts.tf       |   3 ++-
 authentik/test.tf           |  20 ++++++++++++++++++++
 4 files changed, 44 insertions(+), 2 deletions(-)
 delete mode 100644 authentik/.nextcloud.tf.swp
 create mode 100644 authentik/test.tf

diff --git a/authentik/.nextcloud.tf.swp b/authentik/.nextcloud.tf.swp
deleted file mode 100644
index 78cce5a4c3d2f5b899c231a4670bec2ae2116d8a..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 12288
zcmeHNO^6&t6s`o~Up5-_=INzJ%`Wcr<WGrfauAIW#3YJFqJ*ZVyJn``?ygByb#_OM
z-t}ni5y68R1r<^7qBrke1o0|*6%j=QzpC!(nf)QI2M<a$d^^+KuU>ucd#_&YveiFy
z{`8Y{JU+y5?Pu)tr*95_`SHcwU!7zuP1Ra1ChpA*uRb?cs`7?5?&YhE!(OT~(Hp5k
z<h<XrLTf%yy6ExBjznqYYOfUQHqBL)#dh$wZi7KkASkdS1@^I{M-Ka?-iZ#-U3Wga
zqfx;qC=e6~3Iqj$0zrYGKu{nk5ES@-C}79C*lP%7cN5MN&F8L7pUrLf2nqxRf&xK-
zpg>R{C=e6~3Iqj$0zrYGKv3X6r~uCx>+fOgy_-ND|No!<{r}}1jJ*w91I`0SfxCe{
zz_+(E_7-pr;J`z`cl#K79XJO(02~AE2Nr-|7Z`g7=mUF!FZME~0R^lA5*Psw1B<|Y
zz`elFw=woT@Ck4g5I_bT1NH$6z)!a__6G16@F;K)H~{PhKD&jnkAM$=>%djuDPTXa
z0PF?+yqU2dfNy}$fscU?f$PBgz$?J>z;WOYX!JYq8}K!79dNq63xq2u5EKXs1O@&r
z1+Flnk{5zbQgmi|K8zm83R#+nX<<~QQ$bOCiYyswRgEKx+S6nSudV52#+<vcR#v4d
zPw?fk%!G#T+3@MZM7d{2;?_+pGYmF)HKYv}h_yBmEIixI7A^JdIrH&2mnnDW>E@Y7
zQ_7Au(MA80TC(+kWRR=1<>r-<!%~*RWK~S+N4Qs7B<YBkLtzl<3$V=PK%|p27ta6G
z?*<9RLfc7FfS2>uYGP6~7Bfk@^}QE{DC3sLJNM$pc16Ku4rv`*OtWF$nr=(57J;bJ
zIn6G}KeBdgR(ieq>>y4T#`O`#*ot)2Lky-@8KDy;v(%qLjHYrG+@>QJVS%%WuEdPh
zGPN#^1Z^O74sk`6Xpu=RQkzs-wzOn<ndcH=BW*ql@UTe)mzy{f1778}J8$3hZ@h9&
zGNt89JN7e8M|Z=>t}I*;N!v|TX>g*lDcGuCN9RJSFU0Bfs4AI7t^hie<`N?kBT_A_
z6QY<T8=g5yI&^mIV&(Y?t;sy6zM!Efh2~adBnMO~>yqde6@I~_saKi7qvmC%ibQ6!
z@|n(nXI_Yor*{vb3QA*gKZLp?u}+5{^wZPR;!=e?WHDV(6{Wl+1VT7JN~*Hs%90wa
zz;a8&*nZVbb!?XUwkxkcu_DPuIkY1L0UooK(?&Eua28Xucu$>uoKao6wd&A(#nIL=
zx2U#$Wrc}{!Y<C*NaE82!(~E2E_!2^tfi&8a65kdK|?bSWR=&!+4}I+z~84zgYj6E
z8Oq!bBUMt{j$)|g68nrIR85HrCy2^(EqFE|u`Y4Ow;2a6C=I9eHbmRCOR{t}-feWL
zQkGAn^?f;+F<xBS9CdBJOlMRn+DO67&CAKZ-Ht;&Y%_zc64jhM4Fgj3ms-%sNrq<{
z^(Bmrz2ffKGV*OJU6OB<)C`KzQ$(39Mt*0BmKbW^50NG@6?&MvfsomjJuC8S1RB+|
zuP{hILPznpw5F;&Lw@p!TUwW;k$v=NShxA|PBVp0?$(;mk9*&C-53s^6IAnqXajUJ
zzhbdNx?M18W}2%Olu=E_tze{XLR`ZGoVo#9ynDJ}Y%Ka!>iJ+DIyRtOZ!?)=F-O^N
zzf@Gl+Z3Yc3vIAe!LN=xMVmzjX(+~wHH5HR`ERkWXq*;r>_N-R%~$K)-o$XQxO5TI
zo?5q>yDCO|YP`6T^$7uMPWAMd9pxa_$5<Q&0%2{RIN_Hn`F$zzGolZoM+{^xHf`*9
zF^liq)MVBg+I+aJbHkptX)m2`9rbSN+D7LJBH7x-sGX_fwwd`~dj7#QZi2r6$D?@X

diff --git a/authentik/chat.tf b/authentik/chat.tf
index 8310de4..e36874e 100644
--- a/authentik/chat.tf
+++ b/authentik/chat.tf
@@ -1,3 +1,23 @@
+#resource "authentik_provider_proxy" "chat" {
+#  name          = "Chat"
+#  internal_host = "http://open-webui.ollama:8080"
+#  external_host = "https://chat.lab.cowley.tech"
+#
+#  internal_host_ssl_validation = false
+#
+#  authentication_flow = data.authentik_flow.default-authentication-flow.id
+#  authorization_flow  = data.authentik_flow.default-provider-authorization-implicit-consent.id
+#  invalidation_flow   = data.authentik_flow.default-provider-invalidation-flow.id
+#
+#  access_token_validity = "hours=24"
+#}
+#
+#resource "authentik_application" "chat" {
+#  name = "Chat"
+#  slug = "chat"
+#
+#  protocol_provider = authentik_provider_proxy.chat.id
+#}
 
 resource "random_id" "chat_client_id" {
   byte_length = 16
@@ -8,7 +28,8 @@ resource "random_id" "chat_secret_key" {
 resource "authentik_provider_oauth2" "chat" {
   name = "Chat"
 
-  client_id           = random_id.chat_client_id.id
+  #client_id           = random_id.chat_client_id.id
+  client_id           = "2VbXTsFUJV5fgrRJTeQ"
   authentication_flow = data.authentik_flow.default-authentication-flow.id
   authorization_flow  = data.authentik_flow.default-provider-authorization-implicit-consent.id
   invalidation_flow   = data.authentik_flow.default-invalidation-flow.id
diff --git a/authentik/outposts.tf b/authentik/outposts.tf
index 3be216b..d8fbebb 100644
--- a/authentik/outposts.tf
+++ b/authentik/outposts.tf
@@ -1,10 +1,11 @@
 resource "authentik_outpost" "embedded_outpost" {
   name = "authentik Embedded Outpost"
   protocol_providers = [
+    #authentik_provider_proxy.chat.id,
     authentik_provider_proxy.esphome.id,
     authentik_provider_proxy.pinchflat.id,
     authentik_provider_proxy.paperless-gpt.id,
-    #authentik_provider_proxy.tubearchivist.id,
+    #authentik_provider_proxy.proxy-test.id,
     #authentik_provider_proxy.spotizerr.id,
   ]
   service_connection = authentik_service_connection_kubernetes.local.id
diff --git a/authentik/test.tf b/authentik/test.tf
new file mode 100644
index 0000000..8266563
--- /dev/null
+++ b/authentik/test.tf
@@ -0,0 +1,20 @@
+resource "authentik_provider_proxy" "proxy-test" {
+  name          = "Proxy Test"
+  internal_host = "http://homelab-proxy-test.tools:8000"
+  external_host = "https://proxy-test.lab.cowley.tech"
+
+  internal_host_ssl_validation = false
+
+  authentication_flow = data.authentik_flow.default-authentication-flow.id
+  authorization_flow  = data.authentik_flow.default-provider-authorization-implicit-consent.id
+  invalidation_flow   = data.authentik_flow.default-provider-invalidation-flow.id
+
+  access_token_validity = "hours=24"
+}
+
+resource "authentik_application" "proxy-test" {
+  name = "Proxy Test"
+  slug = "proxy-test"
+
+  protocol_provider = authentik_provider_proxy.proxy-test.id
+}