implement oauth device code 'as if' endpoints

chart/templates/config.yaml

@@ -4,5 +4,7 @@ metadata:
   name: {{ include "webapp.name" . }}-config
   namespace: {{ .Release.Namespace }}
 data:
+  OAUTH_ALLOWED_HTTP2_AUTHORITY: webapp.arcodange.duckdns.org
+  OAUTH_DEVICE_CODE_ALLOWED_IPS: 90.16.102.250,
   DATABASE_URL: postgres://pgbouncer_auth:pgbouncer_auth@pgbouncer.tools/postgres?sslmode=disable
 #  DATABASE_URL: postgres://username:password@localhost/dbname?sslmode=disable

chart/values.yaml

@@ -104,7 +104,8 @@ volumeMounts: []
 #   mountPath: "/etc/foo"
 #   readOnly: true
 
-nodeSelector: {}
+nodeSelector:
+  kubernetes.io/hostname: pi1 # entrypoint of the network, allows to avoid NAT and keep user IP
 
 tolerations: []