aws_profile = "infra-sandbox"
environment = "sandbox"

# Networking
allowed_ingress_cidrs = ["{{ vpn_ip }}/32"]

# Compute
instance_type = "t3.medium"
ami_id        = "{{ ami_id }}" # Ubuntu 22.04 LTS amd64 eu-central-1
key_name      = "gemma-infra"

# {{# if_rds }}
# Database
db_instance_class = "db.t4g.micro"
# {{/ if_rds }}

# Secrets — provide on first apply, then they're stored in AWS:
#   tofu apply -var-file=environments/sandbox.tfvars \
# {{# if_ses }}
#     -var 'ses_smtp_user=AKIA...' \
#     -var 'ses_smtp_password=...'
# {{/ if_ses }}
# Auto-generated secrets: RDS password, app secret.

# {{# if_s3 }}
# S3
s3_expiration_days = 365
# {{/ if_s3 }}

# Tags
tags = {
  Environment = "sandbox"
}