diff --git a/variables.tf b/variables.tf
index 41fdce6..a185fe6 100644
--- a/variables.tf
+++ b/variables.tf
@@ -19,6 +19,22 @@ variable "vault_cloudflare_path" {
   default     = "secret/cloudflare"
 }
 
+# =============================================================================
+# CLOUDFLARE CONFIGURATION
+# =============================================================================
+
+variable "authentik_oidc_client_id_cloudflare" {
+  description = "Client ID for Authentik"
+  type        = string
+  sensitive   = true
+}
+
+variable "authentik_oidc_secret_cloudflare" {
+  description = "Secret for Authentik"
+  type        = string
+  sensitive   = true
+}
+
 # =============================================================================
 # CLOUDFLARE CONFIGURATION
 # =============================================================================