# ── Outputs ───────────────────────────────────────────────────────────────────
# After `terraform apply`, use these IPs to update Cloudflare DNS A records.
#
# Prod:  neurontechnologies.ai + www.neurontechnologies.ai → prod_lb_ip
# Stage: stage.neurontechnologies.ai                       → stage_lb_ip
#
# In the Legion Terraform (dns-neurontechnologies.tf), replace the tunnel CNAMEs
# for neurontechnologies.ai, www, and stage with A records pointing to these IPs.
# Set proxied=true in Cloudflare to keep CDN/DDoS protection layered in front.

output "prod_lb_ip" {
  description = "Global anycast IP for the production load balancer (neurontechnologies.ai + www)"
  value       = google_compute_global_address.prod.address
}

output "stage_lb_ip" {
  description = "Global anycast IP for the staging load balancer (stage.neurontechnologies.ai)"
  value       = google_compute_global_address.stage.address
}

output "prod_ssl_cert_name" {
  description = "Name of the Google-managed SSL cert for prod (check provisioning status in GCP console)"
  value       = google_compute_managed_ssl_certificate.prod.name
}

output "stage_ssl_cert_name" {
  description = "Name of the Google-managed SSL cert for stage"
  value       = google_compute_managed_ssl_certificate.stage.name
}

output "marketing_service_account_email" {
  description = "Service account email for Cloud Run services"
  value       = google_service_account.marketing.email
}

output "cloud_run_services" {
  description = "Cloud Run service URLs per region"
  value = {
    prod_us   = google_cloud_run_v2_service.prod_us.uri
    prod_eu   = google_cloud_run_v2_service.prod_eu.uri
    prod_apac = google_cloud_run_v2_service.prod_apac.uri
    stage     = google_cloud_run_v2_service.stage.uri
  }
}