variables.tofu.example

# variables.tofu
#
# Fleet-wide settings. Anything that varies per VM belongs in inventory/*.yaml
# instead; see modules/vm/variables.tofu for that contract.

variable "pve_node" {
  description = "ProxMox node that hosts the VMs."
  type        = string
  default     = "pve"
}

variable "pve_endpoint" {
  description = "ProxMox API endpoint. EDIT: point at your node."
  type        = string
  default     = "https://10.0.0.10:8006/"
}

variable "cloud_image_file_id" {
  description = "Datastore reference to the golden cloud image used as the disk source, built and uploaded by scripts/build-image.sh. EDIT: build an image and point this at it."
  type        = string
  default     = "local:import/resolute-server-cloudimg-amd64-20260720-golden-20260720T000000Z.qcow2"
}

variable "disk_datastore" {
  description = "Datastore holding VM disks and cloud-init drives. EDIT: name your VM-disk datastore."
  type        = string
  default     = "local-lvm"
}

variable "network_bridge" {
  description = "Bridge VM NICs attach to. The fwbr* interfaces are per-VM firewall bridges, not candidates."
  type        = string
  default     = "vmbr0"
}

variable "ci_user" {
  description = "Login account created by cloud-init on every VM."
  type        = string
  default     = "ubuntu"
}

variable "ci_timezone" {
  description = "Timezone applied by the ansible base role on every VM. Re-appliable: unlike a first-boot setting, changing it reaches existing VMs."
  type        = string
  default     = "Etc/UTC"
}

variable "ssh_public_keys" {
  description = "Public keys authorized for ci_user. Without at least one, the VMs are unreachable."
  type        = list(string)

  validation {
    condition     = length(var.ssh_public_keys) > 0
    error_message = "Provide at least one public key; the cloud image has no default password."
  }
}