Google as a Source without https and public domain

[pedorich-n]

Hello!

I host Authentik on my home server available only in LAN and Tailscale at http://authentik.server.lan.
I want to add Google as a Social Login Source, but Google's rules for redirect_url won't allow me to use my local address. I thought I might use tools like ngrok to host a publicly available https tunnel pointing to Authentik and set that address as a redirect in Google. The problem is that Google's token will be issued for that "tunnel URL", not for http://authentik.server.lan.

Is there a way to set up Authentik to work with in this scenario? To work with two domains but treat it as one.
I would like to avoid buying a public domain, managing SSL certificates, putting my local server as a subdomain of the public domain, etc.

Thanks.