diff --git a/roles/authentik/meta/argument_specs.yml b/roles/authentik/meta/argument_specs.yml
new file mode 100644
index 0000000..70c16b9
--- /dev/null
+++ b/roles/authentik/meta/argument_specs.yml
@@ -0,0 +1,16 @@
+---
+argument_specs:
+  main:
+    options:
+      postgresql_password:
+        type: "str"
+        required: true
+      secret_key:
+        type: "str"
+        required: true
+      smtp_password:
+        type: "str"
+        required: true
+      ldap_outpost_token:
+        type: "str"
+        required: true
diff --git a/roles/authentik/vars/main.yml b/roles/authentik/vars/main.yml
index 81f922b..02945af 100644
--- a/roles/authentik/vars/main.yml
+++ b/roles/authentik/vars/main.yml
@@ -1,6 +1,2 @@
 image: ghcr.io/goauthentik/server
 tag: 2024.8.3
-
-postgresql_password:
-secret_key:
-smtp_password: