# Copy to terraform.tfvars and fill in - terraform.tfvars itself is gitignored,
# never commit real values there.
#
# The Hetzner API token is NOT set here: export it as HCLOUD_TOKEN in your shell
# before running tofu plan/apply.

# Names of SSH keys already uploaded to your Hetzner Cloud project
# (Console > Security > SSH Keys). All of them are installed on every server. Required.
ssh_key_names = ["your-key-name", "laptop", "phone"]

# Local path to the private key matching ONE of ssh_key_names above (doesn't need
# to be all of them - just one you hold). OpenTofu uses this once per server to
# upload and run the post-install bootstrap script
# (infra/scripts/bootstrap.sh.tftpl) immediately after creation. Required.
ssh_private_key_path = "~/.ssh/id_ed25519"

# Optional overrides - defaults live in variables.tf
# location               = "nbg1"
# dev_server_type        = "cx22"
# prod_server_type       = "cx22"
# vpn_server_type        = "cx22"
# dev_volume_size        = 20
# prod_volume_size       = 20
# allowed_ssh_source_ips = ["203.0.113.4/32"]
# deploy_user             = "deploy"
# dev_runner_count       = 3