# =============================================================================
# OCI CIS Agent — OKE Deployment Stack
# Copy this file to terraform.tfvars and fill in your values.
# =============================================================================

# --- OCI Authentication ---
tenancy_ocid     = "ocid1.tenancy.oc1..aaaaaaaaXXXXXXXX"
user_ocid        = "ocid1.user.oc1..aaaaaaaaXXXXXXXX"
fingerprint      = "aa:bb:cc:dd:ee:ff:00:11:22:33:44:55:66:77:88:99"
private_key_path = "~/.oci/oci_api_key.pem"
region           = "us-ashburn-1"

# --- Compartment ---
compartment_ocid = "ocid1.compartment.oc1..aaaaaaaaXXXXXXXX"

# --- Networking (defaults are fine for most deployments) ---
# vcn_cidr           = "10.0.0.0/16"
# public_subnet_cidr = "10.0.1.0/24"
# nodes_subnet_cidr  = "10.0.2.0/24"
# api_subnet_cidr    = "10.0.3.0/24"

# --- OKE Cluster ---
# kubernetes_version = "v1.30.1"
# cluster_name       = "oci-cis-agent-oke"

# --- Node Pool ---
# node_shape          = "VM.Standard3.Flex"
# node_ocpus          = 2
# node_memory_gb      = 16
# node_count          = 3
# node_boot_volume_gb = 50

# --- SSH Key ---
ssh_public_key = "ssh-rsa AAAAB3NzaC1yc2EAAAA... your-key-here"

# --- Application ---
# Generate with: python3 -c "import secrets; print(secrets.token_hex(64))"
app_secret       = "YOUR_128_CHAR_HEX_SECRET_HERE"
# jwt_expiry_hours = 12
# app_timezone     = "UTC"

# --- OCIR ---
ocir_namespace  = "your-tenancy-namespace"
# ocir_repo_prefix = "oci-cis-agent"

# --- Load Balancer ---
# lb_min_bandwidth_mbps = 10
# lb_max_bandwidth_mbps = 100
# node_port             = 30080

# --- DNS (optional: leave empty to skip) ---
# domain_name = "cisagent.example.com"

# --- Tags ---
# freeform_tags = {
#   "Project"   = "oci-cis-agent"
#   "ManagedBy" = "terraform"
# }