authentik: add vpgen group, change default enrollment group to vpgen

roles/alpina/templates/services/authentik/blueprints/alpina-enrollment-internal.yaml.j2

@@ -93,7 +93,7 @@ entries:
     id: enrollment-user-write
     attrs:
       user_type: internal
-      create_users_group: !Find [authentik_core.group, [name, users]]
+      create_users_group: !Find [authentik_core.group, [name, {{ auth_default_enrollment_group }}]]
   - identifiers:
       name: alpina-enrollment-email-verify
     model: authentik_stages_email.emailstage

roles/alpina/templates/services/authentik/blueprints/alpina-groups.yaml.j2

@@ -38,3 +38,8 @@ entries:
         return {
           "policy": policy,
         }
+
+  - identifiers:
+      name: "vpgen"
+    model: authentik_core.group
+    id: "vpgen"

roles/alpina/templates/services/authentik/blueprints/alpina-oauth-sources.yaml.j2

@@ -76,4 +76,4 @@ entries:
     model: authentik_stages_user_write.userwritestage
     attrs:
       user_type: internal
-      create_users_group: !Find [authentik_core.group, [name, users]]
+      create_users_group: !Find [authentik_core.group, [name, {{ auth_default_enrollment_group }}]]

roles/alpina/templates/services/authentik/blueprints/apps-oauth2.yaml.j2

@@ -38,7 +38,7 @@ entries:
       "icon": "https://vpgen."~ domain ~"/favicon.png",
       "client_secret": auth_vpgen_client_secret,
       "ui_group": "Apps",
-      "allowed_for_groups": ["admins", "users"],
+      "allowed_for_groups": ["admins", "users", "vpgen"],
     },
   } -%}
   {% for app in apps.keys() -%}