feat: Swapped tofu init scripting for ansible scripting

infra/main.tf

@@ -9,12 +9,6 @@ locals {
   # var.allowed_ssh_source_ips for direct SSH access.
   vpn_ssh_source_ips = ["${module.vpn.ipv4}/32"]
 
-  # Rendered once and uploaded+run by every host module immediately after its
-  # server is created - see scripts/bootstrap.sh.tftpl.
-  bootstrap_script = templatefile("${path.module}/scripts/bootstrap.sh.tftpl", {
-    deploy_user = var.deploy_user
-  })
-
   # IDs for every named key in var.ssh_key_names - installed on every server.
   ssh_key_ids = [for k in data.hcloud_ssh_key.main : k.id]
 
@@ -59,10 +53,6 @@ module "dev" {
   volume_size            = var.dev_volume_size
   allowed_ssh_source_ips = local.vpn_ssh_source_ips
   network_ip_range       = var.network_ip_range
-  bootstrap_script       = local.bootstrap_script
-  ssh_private_key_path   = var.ssh_private_key_path
-  deploy_user            = var.deploy_user
-  runner_count           = var.dev_runner_count
 
   # module.network.id alone doesn't guarantee the subnet exists yet, and a server
   # can't join a network before it has a subnet.
@@ -81,9 +71,6 @@ module "prod" {
   volume_size            = var.prod_volume_size
   allowed_ssh_source_ips = local.vpn_ssh_source_ips
   network_ip_range       = var.network_ip_range
-  bootstrap_script       = local.bootstrap_script
-  ssh_private_key_path   = var.ssh_private_key_path
-  deploy_user            = var.deploy_user
 
   depends_on = [module.network]
 }
@@ -96,9 +83,6 @@ module "vpn" {
   location               = var.location
   ssh_key_ids            = local.ssh_key_ids
   allowed_ssh_source_ips = var.allowed_ssh_source_ips
-  bootstrap_script       = local.bootstrap_script
-  ssh_private_key_path   = var.ssh_private_key_path
-  deploy_user            = var.deploy_user
 }
 
 module "dns" {