# 1. Gotify Web UI ForwardAuth
resource "authentik_provider_proxy" "gotify" {
  name               = "Gotify ForwardAuth"
  authorization_flow = var.default_authorization_flow_uuid
  invalidation_flow  = var.default_invalidation_flow_uuid
  external_host      = "https://gotify.snarfnet.net"
  mode               = "forward_single"
}

# 2. Peanut UPS Dashboard ForwardAuth
resource "authentik_provider_proxy" "peanut" {
  name               = "Peanut ForwardAuth"
  authorization_flow = var.default_authorization_flow_uuid
  invalidation_flow  = var.default_invalidation_flow_uuid
  external_host      = "https://peanut.snarfnet.net"
  mode               = "forward_single"
}

# 3. Homebox Inventory ForwardAuth
resource "authentik_provider_proxy" "homebox" {
  name               = "Homebox ForwardAuth"
  authorization_flow = var.default_authorization_flow_uuid
  invalidation_flow  = var.default_invalidation_flow_uuid
  external_host      = "https://homebox.snarfnet.net"
  mode               = "forward_single"
}

# 4. Nginx Proxy Manager Admin ForwardAuth
resource "authentik_provider_proxy" "npm" {
  name               = "NPM Admin ForwardAuth"
  authorization_flow = var.default_authorization_flow_uuid
  invalidation_flow  = var.default_invalidation_flow_uuid
  external_host      = "https://nginx.snarfnet.net"
  mode               = "forward_single"
}