Will Anderson
5bd7702874
- gitea-runner.tf: Secret for Gitea runner registration token - apps/gitea-runner.yaml: Gitea act-runner deployment (init container registers with Gitea, main container runs daemon) — serves all Gitea Actions CI jobs on self-hosted,linux,x64,legion labels - variables.tf: Add gitea_runner_token variable - ddclient.tf: Switch to official ghcr.io/ddclient/ddclient image, remove linuxserver wrapper that was exhausting inotify instances
144 lines
3.3 KiB
Terraform
144 lines
3.3 KiB
Terraform
variable "kubeconfig_path" {
|
|
description = "Path to Legion kubeconfig"
|
|
type = string
|
|
default = "~/.kube/legion-config"
|
|
}
|
|
|
|
variable "legion_ip" {
|
|
description = "Legion server LAN IP (DHCP reserved)"
|
|
type = string
|
|
default = "192.168.68.77"
|
|
}
|
|
|
|
variable "domain_suffix" {
|
|
description = "Internal-only domain (nook.family) — not exposed via Cloudflare tunnel. Use infra_domain for public services."
|
|
type = string
|
|
default = "nook.family"
|
|
}
|
|
|
|
variable "infra_domain" {
|
|
description = "Domain for infrastructure / platform services"
|
|
type = string
|
|
default = "neuralplatform.ai"
|
|
}
|
|
|
|
variable "cloudflare_api_key" {
|
|
description = "Cloudflare global API key for cert-manager DNS-01"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "cloudflare_email" {
|
|
description = "Cloudflare account email"
|
|
type = string
|
|
default = "andersonwilliam85@gmail.com"
|
|
}
|
|
|
|
variable "gitea_domain" {
|
|
description = "Domain for Gitea git server"
|
|
type = string
|
|
default = "git.neuralplatform.dev"
|
|
}
|
|
|
|
variable "gitea_admin_password" {
|
|
description = "Gitea admin user password"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "gitea_db_password" {
|
|
description = "Gitea database password"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "postgres_password" {
|
|
description = "Postgres superuser password"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "kong_db_password" {
|
|
description = "Kong database password"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "grafana_admin_password" {
|
|
description = "Grafana admin password"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "github_classic_pat" {
|
|
description = "GitHub classic PAT with admin:org scope for runner registration"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "github_org" {
|
|
description = "GitHub organization"
|
|
type = string
|
|
default = "harmonic-framework"
|
|
}
|
|
|
|
variable "r2_endpoint" {
|
|
description = "Cloudflare R2 S3-compatible endpoint"
|
|
type = string
|
|
default = "https://651161e0a3d321561b4c90b5bcd5f15b.r2.cloudflarestorage.com"
|
|
}
|
|
|
|
variable "r2_access_key_id" {
|
|
description = "Cloudflare R2 access key ID"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "r2_secret_access_key" {
|
|
description = "Cloudflare R2 secret access key"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "cloudflared_tunnel_token" {
|
|
description = "Cloudflare tunnel token for neural-platform tunnel"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "slack_bot_token" {
|
|
description = "Slack bot token for Neuron bot"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "slack_signing_secret" {
|
|
description = "Slack signing secret for webhook verification"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "github_webhook_secret" {
|
|
description = "GitHub webhook secret for Axon event ingestion"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "gitea_webhook_secret" {
|
|
description = "Gitea webhook secret for Axon event ingestion"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "gitea_api_token" {
|
|
description = "Gitea API token for Argo CD repo access"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "gitea_runner_token" {
|
|
description = "Gitea act-runner registration token"
|
|
type = string
|
|
sensitive = true
|
|
}
|