From fff1937c7f99ef51a55b25f8c4e426013e724e0a Mon Sep 17 00:00:00 2001
From: Bryan Pikaard <bryan@pikaard.com>
Date: Tue, 28 Feb 2023 00:10:08 -0600
Subject: [PATCH] feat: image gen web forward auth

---
 .../src/config/traefik/discord-forward-auth.yaml | 16 ++++++++++++++++
 platform/src/Platform.ts                         |  1 +
 2 files changed, 17 insertions(+)

diff --git a/layer_1/src/config/traefik/discord-forward-auth.yaml b/layer_1/src/config/traefik/discord-forward-auth.yaml
index dfd53988..14a8688e 100644
--- a/layer_1/src/config/traefik/discord-forward-auth.yaml
+++ b/layer_1/src/config/traefik/discord-forward-auth.yaml
@@ -73,6 +73,22 @@ rules:
       - "856290331292991489"
       # Elo Team
       - "930203170636976178"
+  - key: "ImageGeneration"
+    type: "roles"
+    guildId: "856290331279884288"
+    roleIds:
+      # Maintainer
+      - "856290331292991490"
+      # Administrator
+      - "856290331292991489"
+      # Developer
+      - "856291576014569502"
+      # Data Team
+      - "923396697600704532"
+      # Design
+      - "895054913212665898"
+      # MLE Staff
+      - "892975231847764028"
 
 defaultRule:
   key: "DefaultRule"
diff --git a/platform/src/Platform.ts b/platform/src/Platform.ts
index 0581c39a..d3fe8c40 100644
--- a/platform/src/Platform.ts
+++ b/platform/src/Platform.ts
@@ -136,6 +136,7 @@ export class Platform extends pulumi.ComponentResource {
           .tls("lets-encrypt-tls")
           .rule(`Host(\`${this.igUrl}\`)`)
           .targetPort(3000)
+          .forwardAuthRule("ImageGeneration")
 
         if (config.getBoolean("alpha-restrictions")) {
             webLabels.forwardAuthRule("AlphaTesters")