Hubert Cornet
7841ed6aab
Some checks failed
Terraform Apply / Terraform Apply (push) Failing after 12s
36 lines
1.3 KiB
HCL
36 lines
1.3 KiB
HCL
# =============================================================================
|
|
# CLOUDFLARE : Access : service auth
|
|
# =============================================================================
|
|
|
|
#
|
|
resource "cloudflare_zero_trust_access_identity_provider" "gmail" {
|
|
account_id = local.cloudflare_account_id
|
|
name = "Gmail"
|
|
type = "google"
|
|
zone_id = local.cloudflare_zone_id
|
|
|
|
config = {
|
|
client_id = var.google_client_id
|
|
client_secret = var.google_secret
|
|
email_claim_name = "email"
|
|
}
|
|
}
|
|
|
|
#
|
|
resource "cloudflare_zero_trust_access_identity_provider" "authentik_oidc" {
|
|
account_id = local.cloudflare_account_id
|
|
name = "Authentik OIDC"
|
|
type = "oidc"
|
|
zone_id = local.cloudflare_zone_id
|
|
|
|
config = {
|
|
auth_url = "https://authentik.${local.cloudflare_zone_id}/application/o/authorize/"
|
|
certs_url = "https://authentik.${local.cloudflare_zone_id}/application/o/cloudflare-access/jwks/"
|
|
claims = ["given_name", "preferred_username", "nickname", "groups", "role"]
|
|
client_id = local.authentik_oidc_client_id
|
|
client_secret = local.authentik_oidc_secret
|
|
email_claim_name = "email"
|
|
scopes = ["openid", "email", "profile"]
|
|
token_url = "https://authentik.${local.cloudflare_zone_id}/application/o/token/"
|
|
}
|
|
} |