mirror of
https://github.com/ghndrx/authentik-terraform.git
synced 2026-02-10 06:44:58 +00:00
Greg Hendrickson
814e41f3f2
Infrastructure as Code for Authentik identity provider managing: OAuth2/OIDC Applications: - Grafana, Home Assistant, Immich - Uptime Kuma (proxy auth) - Sonarr, Radarr, Prowlarr (*arr stack proxy auth) - ArgoCD Identity Sources: - Google Workspace federation LDAP: - TrueNAS LDAP provider and outpost CI/CD: - GitHub Actions workflow for plan/apply - Secrets managed via GitHub Actions secrets Provider: beryju/authentik v2025.2
91 lines
1.9 KiB
HCL
91 lines
1.9 KiB
HCL
################################################################################
|
|
# Authentik Terraform Variables
|
|
#
|
|
# Set these via:
|
|
# - GitHub Actions secrets (recommended)
|
|
# - terraform.tfvars (local dev only - never commit!)
|
|
# - Environment variables (TF_VAR_*)
|
|
################################################################################
|
|
|
|
# Authentik Connection
|
|
variable "authentik_url" {
|
|
type = string
|
|
description = "Authentik server URL (e.g., https://auth.example.com)"
|
|
}
|
|
|
|
variable "authentik_token" {
|
|
type = string
|
|
sensitive = true
|
|
description = "Authentik API token"
|
|
}
|
|
|
|
# Google OAuth (optional)
|
|
variable "google_client_id" {
|
|
type = string
|
|
default = ""
|
|
description = "Google OAuth client ID"
|
|
}
|
|
|
|
variable "google_client_secret" {
|
|
type = string
|
|
sensitive = true
|
|
default = ""
|
|
description = "Google OAuth client secret"
|
|
}
|
|
|
|
# Application URLs
|
|
variable "argocd_url" {
|
|
type = string
|
|
default = ""
|
|
description = "ArgoCD URL for SSO"
|
|
}
|
|
|
|
variable "grafana_url" {
|
|
type = string
|
|
default = ""
|
|
description = "Grafana URL for SSO"
|
|
}
|
|
|
|
variable "home_assistant_url" {
|
|
type = string
|
|
default = ""
|
|
description = "Home Assistant URL for proxy auth"
|
|
}
|
|
|
|
variable "immich_url" {
|
|
type = string
|
|
default = ""
|
|
description = "Immich URL for proxy auth"
|
|
}
|
|
|
|
variable "uptime_kuma_url" {
|
|
type = string
|
|
default = ""
|
|
description = "Uptime Kuma URL for proxy auth"
|
|
}
|
|
|
|
variable "sonarr_url" {
|
|
type = string
|
|
default = ""
|
|
description = "Sonarr URL for proxy auth"
|
|
}
|
|
|
|
variable "radarr_url" {
|
|
type = string
|
|
default = ""
|
|
description = "Radarr URL for proxy auth"
|
|
}
|
|
|
|
variable "prowlarr_url" {
|
|
type = string
|
|
default = ""
|
|
description = "Prowlarr URL for proxy auth"
|
|
}
|
|
|
|
# LDAP Configuration
|
|
variable "ldap_base_dn" {
|
|
type = string
|
|
default = "dc=ldap,dc=example,dc=com"
|
|
description = "LDAP base DN"
|
|
}
|