mirror of
https://github.com/ghndrx/authentik-terraform.git
synced 2026-02-10 06:44:58 +00:00
d55a52a8d5
- Add app-portainer.tf: OAuth2 provider for Portainer container management - Add portainer_url variable - Enable RBAC policy bindings for Grafana, ArgoCD, Home Assistant - Portainer bound to Infrastructure group policy RBAC Summary: - Infrastructure group → Grafana, ArgoCD, Portainer - Home Automation group → Home Assistant - Media group → arr stack (existing in app-proxy-arr-stack.tf)
97 lines
2.0 KiB
HCL
97 lines
2.0 KiB
HCL
################################################################################
|
|
# Authentik Terraform Variables
|
|
#
|
|
# Set these via:
|
|
# - GitHub Actions secrets (recommended)
|
|
# - terraform.tfvars (local dev only - never commit!)
|
|
# - Environment variables (TF_VAR_*)
|
|
################################################################################
|
|
|
|
# Authentik Connection
|
|
variable "authentik_url" {
|
|
type = string
|
|
description = "Authentik server URL (e.g., https://auth.example.com)"
|
|
}
|
|
|
|
variable "authentik_token" {
|
|
type = string
|
|
sensitive = true
|
|
description = "Authentik API token"
|
|
}
|
|
|
|
# Google OAuth (optional)
|
|
variable "google_client_id" {
|
|
type = string
|
|
default = ""
|
|
description = "Google OAuth client ID"
|
|
}
|
|
|
|
variable "google_client_secret" {
|
|
type = string
|
|
sensitive = true
|
|
default = ""
|
|
description = "Google OAuth client secret"
|
|
}
|
|
|
|
# Application URLs
|
|
variable "argocd_url" {
|
|
type = string
|
|
default = ""
|
|
description = "ArgoCD URL for SSO"
|
|
}
|
|
|
|
variable "grafana_url" {
|
|
type = string
|
|
default = ""
|
|
description = "Grafana URL for SSO"
|
|
}
|
|
|
|
variable "home_assistant_url" {
|
|
type = string
|
|
default = ""
|
|
description = "Home Assistant URL for proxy auth"
|
|
}
|
|
|
|
variable "immich_url" {
|
|
type = string
|
|
default = ""
|
|
description = "Immich URL for proxy auth"
|
|
}
|
|
|
|
variable "uptime_kuma_url" {
|
|
type = string
|
|
default = ""
|
|
description = "Uptime Kuma URL for proxy auth"
|
|
}
|
|
|
|
variable "sonarr_url" {
|
|
type = string
|
|
default = ""
|
|
description = "Sonarr URL for proxy auth"
|
|
}
|
|
|
|
variable "radarr_url" {
|
|
type = string
|
|
default = ""
|
|
description = "Radarr URL for proxy auth"
|
|
}
|
|
|
|
variable "prowlarr_url" {
|
|
type = string
|
|
default = ""
|
|
description = "Prowlarr URL for proxy auth"
|
|
}
|
|
|
|
variable "portainer_url" {
|
|
type = string
|
|
default = ""
|
|
description = "Portainer URL for SSO"
|
|
}
|
|
|
|
# LDAP Configuration
|
|
variable "ldap_base_dn" {
|
|
type = string
|
|
default = "dc=ldap,dc=example,dc=com"
|
|
description = "LDAP base DN"
|
|
}
|