################################################################################
# Authentik Terraform Variables
#
# Set these via:
# - GitHub Actions secrets (recommended)
# - terraform.tfvars (local dev only - never commit!)
# - Environment variables (TF_VAR_*)
################################################################################

# Authentik Connection
variable "authentik_url" {
  type        = string
  description = "Authentik server URL (e.g., https://auth.example.com)"
}

variable "authentik_token" {
  type        = string
  sensitive   = true
  description = "Authentik API token"
}

# Google OAuth (optional)
variable "google_client_id" {
  type        = string
  default     = ""
  description = "Google OAuth client ID"
}

variable "google_client_secret" {
  type        = string
  sensitive   = true
  default     = ""
  description = "Google OAuth client secret"
}

# Application URLs
variable "argocd_url" {
  type        = string
  default     = ""
  description = "ArgoCD URL for SSO"
}

variable "grafana_url" {
  type        = string
  default     = ""
  description = "Grafana URL for SSO"
}

variable "home_assistant_url" {
  type        = string
  default     = ""
  description = "Home Assistant URL for proxy auth"
}

variable "immich_url" {
  type        = string
  default     = ""
  description = "Immich URL for proxy auth"
}

variable "uptime_kuma_url" {
  type        = string
  default     = ""
  description = "Uptime Kuma URL for proxy auth"
}

variable "sonarr_url" {
  type        = string
  default     = ""
  description = "Sonarr URL for proxy auth"
}

variable "radarr_url" {
  type        = string
  default     = ""
  description = "Radarr URL for proxy auth"
}

variable "prowlarr_url" {
  type        = string
  default     = ""
  description = "Prowlarr URL for proxy auth"
}

# LDAP Configuration
variable "ldap_base_dn" {
  type        = string
  default     = "dc=ldap,dc=example,dc=com"
  description = "LDAP base DN"
}