129 lines
5.3 KiB
HCL
129 lines
5.3 KiB
HCL
oauth_applications = {
|
|
"paperless" = {
|
|
name = "Paperless-NGX"
|
|
slug = "paperless"
|
|
group = "Tools"
|
|
meta_description = "Document management system"
|
|
meta_icon = "https://img.icons8.com/fluency/48/documents.png"
|
|
redirect_uris = ["https://docs.hexor.cy/accounts/oidc/authentik/login/callback/"]
|
|
client_type = "confidential"
|
|
include_claims_in_id_token = true
|
|
access_code_validity = "minutes=1"
|
|
access_token_validity = "minutes=5"
|
|
refresh_token_validity = "days=30"
|
|
scope_mappings = ["openid", "profile", "email"]
|
|
create_group = true
|
|
access_groups = ["admins"]
|
|
}
|
|
|
|
"gitea" = {
|
|
name = "Gitea"
|
|
slug = "gitea"
|
|
group = "Tools"
|
|
meta_description = "Git repository hosting"
|
|
meta_icon = "https://img.icons8.com/?size=100&id=20906&format=png&color=000000"
|
|
redirect_uris = ["https://gt.hexor.cy/user/oauth2/Authentik/callback"]
|
|
client_type = "confidential"
|
|
include_claims_in_id_token = true
|
|
access_code_validity = "minutes=1"
|
|
access_token_validity = "minutes=10"
|
|
refresh_token_validity = "days=30"
|
|
scope_mappings = ["openid", "profile", "email"]
|
|
access_groups = ["admins"]
|
|
}
|
|
|
|
"jellyfin" = {
|
|
name = "Jellyfin"
|
|
slug = "jellyfin"
|
|
group = "Media and Storage"
|
|
meta_description = "Media streaming server"
|
|
meta_icon = "https://img.icons8.com/plasticine/100/jellyfin.png"
|
|
redirect_uris = [
|
|
"https://jf.hexor.cy/sso/OID/r/authentik",
|
|
"https://jf.hexor.cy/sso/OID/redirect/authentik"
|
|
]
|
|
client_type = "confidential"
|
|
include_claims_in_id_token = true
|
|
access_code_validity = "minutes=1"
|
|
access_token_validity = "minutes=10"
|
|
refresh_token_validity = "days=30"
|
|
scope_mappings = ["openid", "profile", "email"]
|
|
access_groups = ["admins"]
|
|
}
|
|
|
|
"argocd" = {
|
|
name = "ArgoCD"
|
|
slug = "argocd"
|
|
group = "Core"
|
|
meta_description = "GitOps deployment tool"
|
|
meta_icon = "https://img.icons8.com/color-glass/48/octopus.png"
|
|
redirect_uris = ["https://ag.hexor.cy/auth/callback"]
|
|
client_type = "confidential"
|
|
include_claims_in_id_token = true
|
|
access_code_validity = "minutes=1"
|
|
access_token_validity = "minutes=5"
|
|
refresh_token_validity = "days=30"
|
|
scope_mappings = ["openid", "profile", "email"]
|
|
signing_key = "1b1b5bec-034a-4d96-871a-133f11322360"
|
|
access_groups = ["admins"]
|
|
}
|
|
|
|
"grafana" = {
|
|
name = "Grafana"
|
|
slug = "grafana"
|
|
group = "Core"
|
|
meta_description = "Monitoring and observability"
|
|
meta_icon = "https://img.icons8.com/fluency/48/grafana.png"
|
|
redirect_uris = ["https://gf.hexor.cy/login/generic_oauth"]
|
|
client_type = "confidential"
|
|
include_claims_in_id_token = true
|
|
access_code_validity = "minutes=1"
|
|
access_token_validity = "minutes=5"
|
|
refresh_token_validity = "days=30"
|
|
scope_mappings = ["openid", "profile", "email"]
|
|
access_groups = ["admins"]
|
|
}
|
|
|
|
"immich" = {
|
|
name = "Immich"
|
|
slug = "immich"
|
|
group = "Media and Storage"
|
|
meta_description = "Photo and video management"
|
|
meta_icon = "https://img.icons8.com/fluency/48/photos.png"
|
|
redirect_uris = [
|
|
"https://photos.hexor.cy/auth/login",
|
|
"https://photos.hexor.cy/user-settings",
|
|
"app.immich:///oauth-callback",
|
|
"http://photos.homenet:30283/auth/login",
|
|
"http://photos.homenet:30283/user-settings"
|
|
]
|
|
client_type = "confidential"
|
|
include_claims_in_id_token = true
|
|
access_code_validity = "minutes=1"
|
|
access_token_validity = "minutes=5"
|
|
refresh_token_validity = "days=30"
|
|
scope_mappings = ["openid", "profile", "email"]
|
|
signing_key = "1b1b5bec-034a-4d96-871a-133f11322360"
|
|
access_groups = ["admins"]
|
|
create_group = true
|
|
}
|
|
|
|
"pgadmin" = {
|
|
name = "Postgres WEB Admin"
|
|
slug = "pgadmin"
|
|
group = "Core"
|
|
meta_description = "PostgreSQL WEB administration"
|
|
meta_icon = "https://img.icons8.com/?size=100&id=JRnxU7ZWP4mi&format=png&color=000000"
|
|
redirect_uris = ["https://pg.hexor.cy/oauth2/authorize"]
|
|
client_type = "confidential"
|
|
include_claims_in_id_token = true
|
|
access_code_validity = "minutes=1"
|
|
access_token_validity = "minutes=5"
|
|
refresh_token_validity = "days=30"
|
|
scope_mappings = ["openid", "profile", "email"]
|
|
access_groups = ["admins"]
|
|
signing_key = "1b1b5bec-034a-4d96-871a-133f11322360"
|
|
}
|
|
}
|
|
|