diff --git a/src/main/terraform/env/cstar-p-tier-0/backend.ini b/src/main/terraform/env/cstar-p-tier-0/backend.ini
new file mode 100644
index 0000000..18b0a97
--- /dev/null
+++ b/src/main/terraform/env/cstar-p-tier-0/backend.ini
@@ -0,0 +1 @@
+subscription=PROD-CSTAR
\ No newline at end of file
diff --git a/src/main/terraform/env/cstar-p-tier-0/backend.tfvars b/src/main/terraform/env/cstar-p-tier-0/backend.tfvars
new file mode 100644
index 0000000..da011fb
--- /dev/null
+++ b/src/main/terraform/env/cstar-p-tier-0/backend.tfvars
@@ -0,0 +1,4 @@
+resource_group_name  = "terraform-state-rg"
+storage_account_name = "tfappprodcstar"
+container_name       = "terraform-state"
+key                  = "tier-0-auth.tfstate"
\ No newline at end of file
diff --git a/src/main/terraform/env/cstar-p-tier-0/terraform.tfvars b/src/main/terraform/env/cstar-p-tier-0/terraform.tfvars
new file mode 100644
index 0000000..397888f
--- /dev/null
+++ b/src/main/terraform/env/cstar-p-tier-0/terraform.tfvars
@@ -0,0 +1,63 @@
+# ------------------------------------------------------------------------------
+# General variables.
+# ------------------------------------------------------------------------------
+prefix         = "cstar"
+env_short      = "p"
+env            = "prod"
+location       = "westeurope" # this will be "italynorth"
+location_short = "weu"        # this will be "itn"
+domain         = "tier-0"
+
+tags = {
+  CreatedBy   = "Terraform"
+  Environment = "prod"
+  Owner       = "cstar"
+  Source      = "https://github.com/pagopa/mil-auth/tree/main/src/main/terraform"
+  CostCenter  = "TS310 - PAGAMENTI & SERVIZI"
+}
+
+# ------------------------------------------------------------------------------
+# External resources.
+# ------------------------------------------------------------------------------
+cae_name                       = "cstar-p-tier-0-cae"
+cae_resource_group_name        = "cstar-p-tier-0-app-rg"
+id_name                        = "cstar-p-tier-0-auth-id"
+id_resource_group_name         = "cstar-p-tier-0-identity-rg"
+general_kv_name                = "cstar-p-tier-0-gen-kv"
+general_kv_resource_group_name = "cstar-p-tier-0-sec-rg"
+auth_kv_name                   = "cstar-p-tier-0-auth-kv"
+auth_kv_resource_group_name    = "cstar-p-tier-0-sec-rg"
+auth_st_name                   = "cstarptier0authst"
+auth_st_resource_group_name    = "cstar-p-tier-0-data-rg"
+
+# ------------------------------------------------------------------------------
+# Names of key vault secrets.
+# ------------------------------------------------------------------------------
+cosmosdb_account_primary_mongodb_connection_string_kv_secret   = "cosmosdb-account-tier-0-primary-mongodb-connection-string"
+cosmosdb_account_secondary_mongodb_connection_string_kv_secret = "cosmosdb-account-tier-0-secondary-mongodb-connection-string"
+storage_account_primary_blob_endpoint_kv_secret                = "storage-account-auth-primary-blob-endpoint"
+key_vault_auth_vault_uri_kv_secret                             = "key-vault-auth-vault-uri"
+application_insigths_connection_string_kv_secret               = "core-application-insigths-connection-string"
+
+# ------------------------------------------------------------------------------
+# Configuration of the microservice.
+# ------------------------------------------------------------------------------
+mil_auth_quarkus_log_level                 = "ERROR"
+mil_auth_app_log_level                     = "DEBUG"
+mil_auth_json_log                          = true
+mil_auth_quarkus_rest_client_logging_scope = "all"
+mil_auth_cryptoperiod                      = 43200
+mil_auth_keysize                           = 2048
+mil_auth_access_duration                   = 900
+mil_auth_refresh_duration                  = 3600
+mil_auth_image                             = "ghcr.io/pagopa/mil-auth:latest"
+mil_auth_cpu                               = 1
+mil_auth_memory                            = "2Gi"
+mil_auth_max_replicas                      = 5
+mil_auth_min_replicas                      = 1
+mil_auth_keyvault_maxresults               = 20
+mil_auth_keyvault_backoff_num_of_attempts  = 5
+mil_auth_mongodb_connect_timeout           = "5s"
+mil_auth_mongodb_read_timeout              = "10s"
+mil_auth_mongodb_server_selection_timeout  = "5s"
+mil_auth_base_url                          = "https://mil-d-apim.azure-api.net/mil-auth"
\ No newline at end of file