data "authentik_group" "akadmin" {
  name = "authentik Admins"
}
resource "authentik_group" "groups" {
  name  = "nextcloud-users"
}
data "authentik_group" "readed_groups" {
  depends_on = [ authentik_group.groups ]
  name  = "nextcloud-users"
}

resource "authentik_application" "prj_app" {
  name              = "${var.instance}"
  slug              = "${var.component}-${var.instance}"
  protocol_provider = authentik_provider_oauth2.oauth2.id
  meta_launch_url   = format("https://%s.%s", var.sub-domain, var.domain-name)
  meta_icon         = format("https://%s.%s/%s", var.sub-domain, var.domain-name, "apps/theming/favicon")
}

resource "authentik_policy_binding" "prj_access_users" {
  target = authentik_application.prj_app.uuid
  group  = authentik_group.groups.id
  order  = 0
}
resource "authentik_policy_binding" "prj_access_vynil" {
  target = authentik_application.prj_app.uuid
  group  = data.authentik_group.akadmin.id
  order  = 1
}