Refacto and add modules

application/application.tf

@@ -1,6 +1,8 @@
 locals {
-  app_name   = (var.component == var.instance || var.component=="") ? var.instance : format("%s-%s", var.component, var.instance)
-  main_group = format("app-%s", local.app_name)
+  app_slug   = "${var.instance}${var.component == "" ? "" : "-"}${var.component}"
+  app_name   = var.app_name != "" ? var.app_name : var.component == var.instance ? var.instance : format("%s-%s", var.instance, var.component)
+  main_group = format("app-%s", local.app_slug)
+  url_icon   = startswith(var.icon, "fa-") ? "fa://${var.icon}" : format("https://%s/%s", var.dns_name, var.icon)
 }
 data "authentik_group" "akadmin" {
   name = "authentik Admins"
@@ -16,31 +18,31 @@ resource "authentik_group" "subgroup" {
   parent = authentik_group.groups.id
 }
 
-resource "authentik_application" "prj_app" {
-  name                  = var.instance
-  slug                  = "${var.component}-${var.instance}"
+resource "authentik_application" "app" {
+  name                  = var.app_name
+  slug                  = local.app_slug
   group                 = var.app_group
   protocol_provider     = var.protocol_provider
   backchannel_providers = var.backchannel_providers
   meta_launch_url       = format("https://%s", var.dns_name)
-  meta_icon             = format("https://%s/%s", var.dns_name, var.icon)
+  meta_icon             = local.url_icon
 }
 
 resource "authentik_policy_expression" "policy" {
-  name       = local.main_group
+  name       = "${local.app_slug}-${local.main_group}"
   expression = <<-EOF
     attr = request.user.group_attributes()
     return attr['${local.app_name}'] if '${local.app_name}' in attr else False
   EOF
 }
 
-resource "authentik_policy_binding" "prj_access_users" {
-  target = authentik_application.prj_app.uuid
+resource "authentik_policy_binding" "access_users" {
+  target = authentik_application.app.uuid
   policy = authentik_policy_expression.policy.id
   order  = 0
 }
-resource "authentik_policy_binding" "prj_access_vynil" {
-  target = authentik_application.prj_app.uuid
+resource "authentik_policy_binding" "access_vynil" {
+  target = authentik_application.app.uuid
   group  = data.authentik_group.akadmin.id
   order  = 1
 }

application/outputs.tf

@@ -1,10 +1,10 @@
-output "application-id" {
-  value = authentik_application.prj_app.uuid
+output "application_id" {
+  value = authentik_application.app.uuid
 }
 
-output "policy-id" {
+output "policy_id" {
   value = authentik_policy_expression.policy.id
 }
 output "main_group" {
   value = local.main_group
-}
+}

application/variables.tf

@@ -17,6 +17,10 @@ variable "protocol_provider" {
 variable "dns_name" {
   type = string
 }
+variable "app_name" {
+  type    = string
+  default = ""
+}
 variable "sub_groups" {
   type    = list(string)
   default = []