feat: Created post-install script

infra/modules/vpn/main.tf

@@ -38,4 +38,23 @@ resource "hcloud_server" "this" {
   location     = var.location
   ssh_keys     = [var.ssh_key_id]
   firewall_ids = [hcloud_firewall.this.id]
+
+  connection {
+    type        = "ssh"
+    host        = self.ipv4_address
+    user        = "root"
+    private_key = file(var.ssh_private_key_path)
+  }
+
+  provisioner "file" {
+    content     = var.bootstrap_script
+    destination = "/root/bootstrap.sh"
+  }
+
+  provisioner "remote-exec" {
+    inline = [
+      "chmod +x /root/bootstrap.sh",
+      "/root/bootstrap.sh",
+    ]
+  }
 }

infra/modules/vpn/variables.tf

@@ -22,3 +22,13 @@ variable "allowed_ssh_source_ips" {
   description = "CIDRs allowed to reach port 22 on vpn."
   type        = list(string)
 }
+
+variable "bootstrap_script" {
+  description = "Rendered post-install script, uploaded and executed on the server immediately after creation."
+  type        = string
+}
+
+variable "ssh_private_key_path" {
+  description = "Local path to the private key matching var.ssh_key_id, used to run the bootstrap script over SSH."
+  type        = string
+}