diff --git a/terraform/authentik/oauth2-apps.tfvars b/terraform/authentik/oauth2-apps.tfvars
index 1c9fa23..5678f1e 100644
--- a/terraform/authentik/oauth2-apps.tfvars
+++ b/terraform/authentik/oauth2-apps.tfvars
@@ -124,5 +124,27 @@ oauth_applications = {
     access_groups              = ["admins"]
     signing_key                = "1b1b5bec-034a-4d96-871a-133f11322360"
   }
+
+  "home-assistant" = {
+    name                       = "Home Assistant"
+    slug                       = "home-assistant"
+    group                      = "Internal"
+    meta_description           = "Home Assistant"
+    meta_icon                  = "https://img.icons8.com/stickers/100/smart-home-automation.png"
+    redirect_uris              = [
+      "http://ha-lms:8123/auth/oidc/callback",
+      "http://ha-lms.homenet:8123/auth/oidc/callback",
+      "http://ha-london:8123/auth/oidc/callback",
+      "http://ha-london.tail2fe2d.ts.net:8123/auth/oidc/callback",
+      ]
+    client_type                = "confidential"
+    include_claims_in_id_token = true
+    access_code_validity       = "minutes=1"
+    access_token_validity      = "minutes=5"
+    refresh_token_validity     = "days=30"
+    scope_mappings             = ["openid", "profile", "email"]
+    access_groups              = ["admins"]
+    signing_key                = "1b1b5bec-034a-4d96-871a-133f11322360"
+  }
 }