From bf16a44e87fe4fe4874860624b49f25abac58404 Mon Sep 17 00:00:00 2001
From: Kevin Veen-Birkenbach <kevin@veen.world>
Date: Sun, 20 Jul 2025 10:46:35 +0200
Subject: [PATCH] Implemented allowed_groups

---
 roles/web-app-lam/config/main.yml          | 2 ++
 roles/web-app-pgadmin/config/main.yml      | 2 ++
 roles/web-app-phpldapadmin/config/main.yml | 2 ++
 roles/web-app-phpmyadmin/config/main.yml   | 2 ++
 4 files changed, 8 insertions(+)

diff --git a/roles/web-app-lam/config/main.yml b/roles/web-app-lam/config/main.yml
index dd8c67d8..d109c6d0 100644
--- a/roles/web-app-lam/config/main.yml
+++ b/roles/web-app-lam/config/main.yml
@@ -3,6 +3,8 @@ images:
 oauth2_proxy:
   application:                  application
   port:                         80
+  allowed_groups:
+    - "web-app-lam-administrator"
 features:
   matomo:                       true
   css:                          true
diff --git a/roles/web-app-pgadmin/config/main.yml b/roles/web-app-pgadmin/config/main.yml
index 62907d12..07a64e59 100644
--- a/roles/web-app-pgadmin/config/main.yml
+++ b/roles/web-app-pgadmin/config/main.yml
@@ -4,6 +4,8 @@ master_password_required: True                              # Master password is
 oauth2_proxy:
   application:            "application"
   port:                   "80"
+  allowed_groups:
+    - "web-app-pgadmin-administrator"
 features:
   matomo:                 true
   css:                    true
diff --git a/roles/web-app-phpldapadmin/config/main.yml b/roles/web-app-phpldapadmin/config/main.yml
index a12019bd..1499f15f 100644
--- a/roles/web-app-phpldapadmin/config/main.yml
+++ b/roles/web-app-phpldapadmin/config/main.yml
@@ -2,6 +2,8 @@ version:              "2.0.0-dev"
 oauth2_proxy:
   application:        application  # Needs to be the same as webinterface
   port:               8080         # application port
+  allowed_groups:
+    - "web-app-phpldapadmin-administrator"
 features:
   matomo:             true
   css:                true
diff --git a/roles/web-app-phpmyadmin/config/main.yml b/roles/web-app-phpmyadmin/config/main.yml
index a4cfa076..b30dd928 100644
--- a/roles/web-app-phpmyadmin/config/main.yml
+++ b/roles/web-app-phpmyadmin/config/main.yml
@@ -2,6 +2,8 @@ autologin:            false         # This is a high security risk. Just activat
 oauth2_proxy:  
   port:               "80"
   application:        "application"
+  allowed_groups:
+    - "web-app-phpmyadmin-administrator"
 features:
   matomo:             true
   css:                false