# Copy to terraform.tfvars and fill in - terraform.tfvars itself is gitignored,
# never commit real values there.
#
# The Hetzner API token is NOT set here: export it as HCLOUD_TOKEN in your shell
# before running tofu plan/apply.

# Name of an SSH key already uploaded to your Hetzner Cloud project
# (Console > Security > SSH Keys). Required.
ssh_key_name = "your-key-name"

# Local path to the private key matching ssh_key_name above. OpenTofu uses this
# once per server to upload and run the post-install bootstrap script
# (infra/scripts/bootstrap.sh.tftpl) immediately after creation. Required.
ssh_private_key_path = "~/.ssh/id_ed25519"

# Optional overrides - defaults live in variables.tf
# location               = "nbg1"
# dev_server_type        = "cx22"
# prod_server_type       = "cx22"
# vpn_server_type        = "cx22"
# dev_volume_size        = 20
# prod_volume_size       = 20
# allowed_ssh_source_ips = ["203.0.113.4/32"]
# deploy_user             = "deploy"