diff --git a/manifests/params.pp b/manifests/params.pp
index cf23557..57bd262 100644
--- a/manifests/params.pp
+++ b/manifests/params.pp
@@ -54,57 +54,66 @@
 #   in Gitea.
 # @param [String] ga_storage_type The storage type for Gitea.
 # @param [String] ga_instance_name The instance name for Gitea.
+# @param [String] ga_lfs_jwt_secret The JWT secret for Git L
+#   FS in Gitea.
+#  @param [String] ga_admin_allow_create_organization Whether to allow admin 
+#   to create organizations in Gitea.
+# @param [String] ga_internal_token The internal token for Gitea.
+# @param [String] ga_jwt_secret The JWT secret for Gitea.
 ##############################################################################
 class confdroid_gitea::params (
 
   # main
-  Array $ga_reqpackages                     = ['git', 'wget', 'tar'],
-  String $ga_pkg_ensure                     = 'present',
-  String $ga_host_fqdn                      = 'gitea.example.net',
-  String $ga_opt_dir                        = '/opt/gitea',
-  String $ga_dl_url                         = 'https://dl.gitea.com/gitea',
-  String $ga_dl_version                     = '1.25.4',
-  String $ga_user                           = 'git',
-  String $ga_domain                         = 'localhost',
-  String $ga_root_url                       = 'http://localhost:3000',
-  Boolean $ga_disable_ssh                   = false,
-  Boolean $ga_start_lfs                     = true,
-  Boolean $ga_start_ssh                     = false,
-  String $ga_instance_name                  = 'Your Gitea Instance',
+  Array $ga_reqpackages                       = ['git', 'wget', 'tar'],
+  String $ga_pkg_ensure                       = 'present',
+  String $ga_host_fqdn                        = 'gitea.example.net',
+  String $ga_opt_dir                          = '/opt/gitea',
+  String $ga_dl_url                           = 'https://dl.gitea.com/gitea',
+  String $ga_dl_version                       = '1.25.4',
+  String $ga_user                             = 'git',
+  String $ga_domain                           = 'localhost',
+  String $ga_root_url                         = 'http://localhost:3000',
+  Boolean $ga_disable_ssh                     = false,
+  Boolean $ga_start_lfs                       = true,
+  Boolean $ga_start_ssh                       = false,
+  String $ga_instance_name                    = 'Your Gitea Instance',
+  String $ga_lfs_jwt_secret                   = 'ChangeMeLFSJWTSecret',
 
   # database
-  String $ga_db_type                        = 'postgres',
-  String $ga_db_host                        = 'localhost',
-  String $ga_db_port                        = '5432',
-  String $ga_db_name                        = 'gitea',
-  String $ga_db_user                        = 'ChangeMe',
-  String $ga_db_password                    = 'ChangeMe',
-  Boolean $ga_log_sql                       = false,
-  String $ga_ssl_mode                       = 'require',
+  String $ga_db_type                          = 'postgres',
+  String $ga_db_host                          = 'localhost',
+  String $ga_db_port                          = '5432',
+  String $ga_db_name                          = 'gitea',
+  String $ga_db_user                          = 'ChangeMe',
+  String $ga_db_password                      = 'ChangeMe',
+  Boolean $ga_log_sql                         = false,
+  String $ga_ssl_mode                         = 'require',
   # logging
-  String $ga_log_mode                       = 'file',
-  String $ga_log_level                      = 'info',
+  String $ga_log_mode                         = 'file',
+  String $ga_log_level                        = 'info',
   # security
-  Boolean $ga_install_lock                  = true,
-  String $ga_secret_key                     = 'ChangeMe1234567890',
-  String $ga_reverse_proxy_limit            = '1',
-  String $ga_reverse_proxy_trusted_proxies  = '*',
-  Boolean $ga_disable_root_check            = true,
-  String $ga_admin_username                 = 'admin',
-  String $ga_admin_password                 = 'ChangeMeAdmin123!',
-  String $ga_admin_email                    = 'admin@example.com',
+  Boolean $ga_install_lock                    = true,
+  String $ga_secret_key                       = 'ChangeMe1234567890',
+  String $ga_reverse_proxy_limit              = '1',
+  String $ga_reverse_proxy_trusted_proxies    = '*',
+  Boolean $ga_disable_root_check              = true,
+  String $ga_admin_username                   = 'admin',
+  String $ga_admin_password                   = 'ChangeMeAdmin123!',
+  String $ga_admin_email                      = 'admin@example.com',
+  String $ga_admin_allow_create_organization  = 'true',
+  String $ga_internal_token                   = 'ChangeMeInternalToken',
+  String $ga_jwt_secret                       = 'ChangeMeJWTSecret',
   # service
-  Boolean $ga_disable_registration          = false,
-  Boolean $ga_require_signin_view           = false,
-  Boolean $ga_enable_packages               = true,
-  Boolean $ga_enable_registry               = true,
-  String $ga_storage_type                   = 'filesystem',
-
+  Boolean $ga_disable_registration            = false,
+  Boolean $ga_require_signin_view             = false,
+  Boolean $ga_enable_packages                 = true,
+  Boolean $ga_enable_registry                 = true,
+  String $ga_storage_type                     = 'filesystem',
   # firewall
-  Boolean $ga_use_firewall                  = true,
-  String $ga_http_port                      = '3000',
-  String $ga_ssh_port                       = '22',
-  String $ga_order_prefix                   = '50',
+  Boolean $ga_use_firewall                    = true,
+  String $ga_http_port                        = '3000',
+  String $ga_ssh_port                         = '22',
+  String $ga_order_prefix                     = '50',
 
 ) {
 # facts
diff --git a/templates/app.ini.erb b/templates/app.ini.erb
index 92a38b8..69a9d83 100644
--- a/templates/app.ini.erb
+++ b/templates/app.ini.erb
@@ -27,6 +27,7 @@ SSH_PORT = <%= @ga_ssh_port %>
 SSH_LISTEN_PORT = <%= @ga_ssh_port %>
 LFS_START_SERVER = <%= @ga_start_lfs %>
 START_SSH_SERVER = <%= @ga_start_ssh %>
+LFS_JWT_SECRET = <%= @ga_lfs_jwt_secret %>
 
 [database]
 DB_TYPE = <%= @ga_db_type %>
@@ -63,6 +64,7 @@ SECRET_KEY = <%= @ga_secret_key %>
 REVERSE_PROXY_LIMIT = <%= @ga_reverse_proxy_limit %>
 REVERSE_PROXY_TRUSTED_PROXIES = <%= @ga_reverse_proxy_trusted_proxies %>
 DISABLE_ROOT_CHECK = <%= @ga_disable_root_check %>
+INTERNAL_TOKEN = <%= @ga_internal_token %>
 
 [service]
 DISABLE_REGISTRATION = <%= @ga_disable_registration %>
@@ -75,6 +77,7 @@ PATH = <%= @ga_lfs_dir %>
 USER = <%= @ga_admin_username %>
 PASSWORD = <%= @ga_admin_password %>
 EMAIL = <%= @ga_admin_email %> 
+ALLOW_CREATE_ORGANIZATION = <%= @ga_admin_allow_create_organization %>  
 
 [packages]
 ENABLE = <%= @ga_enable_packages %>
@@ -86,5 +89,7 @@ STORAGE_TYPE = <%= @ga_storage_type %>
 [app]
 NAME = <%= @ga_instance_name %>
 
+[oauth2]
+JWT_SECRET = <%= @ga_jwt_secret %>