variable "kubeconfig_path" {
  description = "Path to Legion kubeconfig"
  type        = string
  default     = "~/.kube/legion-config"
}

variable "legion_ip" {
  description = "Legion server LAN IP (DHCP reserved)"
  type        = string
  default     = "192.168.68.77"
}

variable "domain_suffix" {
  description = "Domain suffix for nook.family family apps"
  type        = string
  default     = "nook.family"
}

variable "infra_domain" {
  description = "Domain for infrastructure / platform services"
  type        = string
  default     = "neuralplatform.ai"
}

variable "cloudflare_api_key" {
  description = "Cloudflare global API key for cert-manager DNS-01"
  type        = string
  sensitive   = true
}

variable "cloudflare_email" {
  description = "Cloudflare account email"
  type        = string
  default     = "andersonwilliam85@gmail.com"
}

variable "gitea_domain" {
  description = "Domain for Gitea git server"
  type        = string
  default     = "git.neuralplatform.dev"
}

variable "gitea_admin_password" {
  description = "Gitea admin user password"
  type        = string
  sensitive   = true
}

variable "gitea_db_password" {
  description = "Gitea database password"
  type        = string
  sensitive   = true
}

variable "postgres_password" {
  description = "Postgres superuser password"
  type        = string
  sensitive   = true
}

variable "kong_db_password" {
  description = "Kong database password"
  type        = string
  sensitive   = true
}

variable "grafana_admin_password" {
  description = "Grafana admin password"
  type        = string
  sensitive   = true
}

variable "github_classic_pat" {
  description = "GitHub classic PAT with admin:org scope for runner registration"
  type        = string
  sensitive   = true
}

variable "github_org" {
  description = "GitHub organization"
  type        = string
  default     = "harmonic-framework"
}

variable "r2_endpoint" {
  description = "Cloudflare R2 S3-compatible endpoint"
  type        = string
  default     = "https://651161e0a3d321561b4c90b5bcd5f15b.r2.cloudflarestorage.com"
}

variable "r2_access_key_id" {
  description = "Cloudflare R2 access key ID"
  type        = string
  sensitive   = true
}

variable "r2_secret_access_key" {
  description = "Cloudflare R2 secret access key"
  type        = string
  sensitive   = true
}

variable "cloudflared_tunnel_token" {
  description = "Cloudflare tunnel token for neural-platform tunnel"
  type        = string
  sensitive   = true
}

variable "slack_bot_token" {
  description = "Slack bot token for Neuron bot"
  type        = string
  sensitive   = true
}

variable "slack_signing_secret" {
  description = "Slack signing secret for webhook verification"
  type        = string
  sensitive   = true
}

variable "github_webhook_secret" {
  description = "GitHub webhook secret for Axon event ingestion"
  type        = string
  sensitive   = true
}

variable "gitea_webhook_secret" {
  description = "Gitea webhook secret for Axon event ingestion"
  type        = string
  sensitive   = true
}