variable "authentik_url" {
  type        = string
  description = "Base URL for the Authentik instance"
  default     = "https://authentik.snarfnet.net"
}

variable "authentik_token" {
  type        = string
  description = "API Token for Authentik automation"
  default     = "SnarfNetPermanentAutomationToken2026"
  sensitive   = true
}

variable "default_authorization_flow_uuid" {
  type        = string
  description = "Default OAuth authorization flow UUID"
  default     = "38a86ef3-f43a-4756-8f54-ca008a8eef6e"
}

variable "default_invalidation_flow_uuid" {
  type        = string
  description = "Default OAuth invalidation flow UUID"
  default     = "7a8145b8-2476-4636-9901-825f826df805"
}

variable "default_signing_key_uuid" {
  type        = string
  description = "Default RSA signing key certificate UUID"
  default     = "6d48ba88-4b51-428f-903c-93334988a941"
}