feat: add netbird docker

tofu/modules/authentik-oidc/vars.tf

@@ -18,6 +18,16 @@ variable "client_secret" {
   type        = string
 }
 
+variable "client_type" {
+  type    = string
+  default = "confidential"
+
+  validation {
+    condition     = contains(["confidential", "public"], var.client_type)
+    error_message = "client_type must be 'confidential' or 'public'"
+  }
+}
+
 variable "app_access_group_id" {
   description = "ID of a group which will have access to the app"
   type        = string
@@ -31,6 +41,11 @@ variable "redirect_uris" {
 variable "sub_mode" {
   type    = string
   default = "user_username"
+
+  validation {
+    condition     = contains(["user_id", "user_username", "hashed_user_id"], var.sub_mode)
+    error_message = "sub_mode must be 'user_id', 'user_username' or 'hashed_user_id'"
+  }
 }
 
 variable "oidc_signing_key" {
@@ -59,7 +74,23 @@ variable "app_publisher" {
   type    = string
   default = ""
 }
+
 variable "app_url" {
   type    = string
   default = ""
 }
+
+variable "access_code_validity" {
+  type    = string
+  default = "minutes=1"
+}
+
+variable "access_token_validity" {
+  type    = string
+  default = "minutes=10"
+}
+
+variable "extra_property_mappings" {
+  type    = list(string)
+  default = []
+}