sjat
9e0c264658
- ADR-007: document ubongo on the legacy V4 net at 10.20.10.151 (transitional, outside the planned srv /24 until the LAN is re-cut) (O10); single authoritative boma.baobab.band -> boma.wingu.me transition note already added earlier - terraform tfvars.example + variables.tf (both envs): pve01 -> pve0 and <host>.boma.baobab.band per ADR-007 naming (O11) - ADR-012/013/015/016/017/018: convert "See also:" prose to `## Related` sections placed after Consequences, matching ADR-014/019-023 (O13) - docs/README + inventories/README: list the missing subdirs / offsite_hosts + offsite.yml merge behaviour (O14, O29 note) - ADR-009: drop the retired `nyumbani` example; use vaultwarden.wingu.me split-horizon (O19) - ROADMAP M2: askari shipped as cx23/x86 (CAX11/ARM out of stock) (O20) - ADR-020: 80/443/3478 opened in M4a (past tense); coordinator role is M4b (O21) - netbird -> netbird_coordinator across ROADMAP M4b, the M4b plan, ADR-024 (O23) - ADR-024: align the M1 DNS-01 wildcard scope wording with ROADMAP (O24) - capacity-scan.py: read the inventory directory so offsite.yml (askari) is seen (O28) - tf_to_inventory.py: generated header now warns it overwrites the manual control node (O9) - tests/tags.yml: proxy concern comment Traefik -> Caddy (missed in the O3 sweep) O9's existing stub hosts.yml header stays as-is (generator-owned, hook-protected); the fix lives in the generator for the next regeneration. make lint + pytest (57) green. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
21 lines
770 B
Text
21 lines
770 B
Text
# Production environment — non-secret values
|
|
# Copy to terraform.tfvars and fill in your values.
|
|
#
|
|
# Secrets must be exported as environment variables before running Terraform:
|
|
# export TF_VAR_proxmox_api_token="terraform@pve!tokenid=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
|
|
#
|
|
# State is local (see backend.tf) — no Forgejo backend credentials needed.
|
|
|
|
proxmox_endpoint = "https://pve0.boma.baobab.band:8006/"
|
|
proxmox_insecure = false
|
|
proxmox_node = "pve0"
|
|
vm_template_id = 9000 # Proxmox VM ID of the Debian 13 cloud-init template
|
|
vm_datastore_id = "local-lvm"
|
|
|
|
gateway = "10.20.0.1"
|
|
dns_servers = ["10.20.0.10", "10.20.0.11"]
|
|
dns_domain = "boma.baobab.band"
|
|
|
|
ssh_public_keys = [
|
|
# "ssh-ed25519 AAAA... user@host",
|
|
]
|