feat: Created post-install script

infra/modules/prod/main.tf

@@ -5,7 +5,7 @@
 resource "hcloud_firewall" "this" {
   name = "prod-firewall"
 
-  rule { # server ssh
+  rule { # server ssh - wired to the vpn server's public IP only, see infra/main.tf
     direction  = "in"
     protocol   = "tcp"
     port       = "22"
@@ -88,6 +88,25 @@ resource "hcloud_server" "this" {
     network_id = var.network_id
     ip         = var.private_ip
   }
+
+  connection {
+    type        = "ssh"
+    host        = self.ipv4_address
+    user        = "root"
+    private_key = file(var.ssh_private_key_path)
+  }
+
+  provisioner "file" {
+    content     = var.bootstrap_script
+    destination = "/root/bootstrap.sh"
+  }
+
+  provisioner "remote-exec" {
+    inline = [
+      "chmod +x /root/bootstrap.sh",
+      "/root/bootstrap.sh",
+    ]
+  }
 }
 
 resource "hcloud_volume" "storage" {