feat(combine): wire monitoring-ng's grafana stack to authentik

combine.yml

@@ -62,6 +62,8 @@ authentik:
             - SECRET_MONITORING_ID_VERSION
             - SECRET_MONITORING_SECRET_VERSION
             - monitoring.svg
+        secrets:
+            monitoring_id: monitoring
     outline:
         uncomment:
             - compose.outline.yml
@@ -300,3 +302,25 @@ mila:
             - SECRET_OIDC_CLIENT_SECRET_VERSION
         shared_secrets:
             mila_secret: oidc_client_secret
+monitoring-ng:
+    authentik:
+        env:
+            GF_SERVER_ROOT_URL: https://monitoring-ng.example.com
+            OIDC_CLIENT_ID: monitoring
+            OIDC_AUTH_URL: https://authentik.example.com/application/o/authorize/
+            OIDC_API_URL: https://authentik.example.com/application/o/userinfo/
+            OIDC_TOKEN_URL: https://authentik.example.com/application/o/token/
+        uncomment:
+            - compose.prometheus.yml
+            - PROMETHEUS_RETENTION_TIME
+            - compose.loki.yml
+            - LOKI_RETENTION_PERIOD
+            - LOKI_STORAGE_FILESYSTEM
+            - compose.grafana.yml
+            - SECRET_GF_ADMINPASSWD_VERSION
+            - compose.grafana-oidc.yml
+            - OIDC_ENABLED
+            - SECRET_GF_OIDC_SECRET_VERSION
+        shared_secrets:
+            monitoring_secret: gf_oidc_secret
+        dependency: [authentik]