sjat
1ee343dfca
hetzner_vm gains a public_web bool (default false); offsite sets it true. Firewall adds 80/443 tcp + 3478 udp from anywhere (SSH-from-ubongo preserved). For M4 Caddy + NetBird. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
41 lines
950 B
HCL
41 lines
950 B
HCL
variable "name" {
|
|
description = "Server name (and hostname)"
|
|
type = string
|
|
}
|
|
|
|
variable "server_type" {
|
|
description = "Hetzner server type, e.g. cax11 (ARM)"
|
|
type = string
|
|
}
|
|
|
|
variable "location" {
|
|
description = "Hetzner location, e.g. hel1"
|
|
type = string
|
|
}
|
|
|
|
variable "image" {
|
|
description = "OS image slug, e.g. debian-13"
|
|
type = string
|
|
}
|
|
|
|
variable "ansible_ssh_pubkey" {
|
|
description = "Public SSH key provisioned for the ansible user via cloud-init"
|
|
type = string
|
|
}
|
|
|
|
variable "ssh_admin_cidrs" {
|
|
description = "Source CIDRs allowed to reach SSH (e.g. ubongo's address/32)"
|
|
type = list(string)
|
|
}
|
|
|
|
variable "public_web" {
|
|
description = "Open the public web/NetBird ports (80/443 TCP, 3478 UDP) to the internet"
|
|
type = bool
|
|
default = false
|
|
}
|
|
|
|
variable "labels" {
|
|
description = "Hetzner resource labels (metadata only)"
|
|
type = map(string)
|
|
default = {}
|
|
}
|