variable "hcloud_token" {
  description = "Hetzner Cloud API token — set via TF_VAR_hcloud_token (from vault.hetzner.token)"
  type        = string
  sensitive   = true
}

variable "ansible_ssh_pubkey" {
  description = "ubongo's control SSH public key, provisioned for the ansible user"
  type        = string
}

variable "ssh_admin_cidrs" {
  description = "Source CIDRs allowed to SSH askari (ubongo's address/32)"
  type        = list(string)
}