variable "tenancy_ocid" {
  description = "OCI tenancy OCID."
  type        = string
}

variable "compartment_ocid" {
  description = "Parent compartment OCID. If create_compartment is false, resources are created here."
  type        = string
}

variable "user_ocid" {
  description = "OCI API user OCID."
  type        = string
}

variable "fingerprint" {
  description = "OCI API key fingerprint."
  type        = string
}

variable "private_key_path" {
  description = "Path to OCI API private key."
  type        = string
}

variable "private_key_password" {
  description = "Password for encrypted OCI API private key, if used."
  type        = string
  default     = null
  sensitive   = true
}

variable "region" {
  description = "OCI region, for example sa-saopaulo-1."
  type        = string
}

variable "environment" {
  description = "Environment label."
  type        = string
  default     = "demo"
}

variable "owner" {
  description = "Owner tag for lab resources."
  type        = string
  default     = "database-security-team"
}

variable "name_prefix" {
  description = "Name prefix for lab resources."
  type        = string
  default     = "dds-lab"
}

variable "freeform_tags" {
  description = "Extra freeform tags."
  type        = map(string)
  default     = {}
}

variable "create_compartment" {
  description = "Create a child compartment for the lab."
  type        = bool
  default     = false
}

variable "lab_compartment_name" {
  description = "Name of child compartment when create_compartment is true."
  type        = string
  default     = "cmp-deep-data-security-lab"
}

variable "vcn_cidr" {
  description = "VCN CIDR."
  type        = string
  default     = "10.40.0.0/16"
}

variable "private_subnet_cidr" {
  description = "Private subnet CIDR for database and private app workloads."
  type        = string
  default     = "10.40.10.0/24"
}

variable "public_subnet_cidr" {
  description = "Public subnet CIDR used only when compute bastion is enabled."
  type        = string
  default     = "10.40.20.0/24"
}

variable "adb_port" {
  description = "Database listener port allowed by NSG. Autonomous Database mTLS commonly uses 1522."
  type        = number
  default     = 1522
}

variable "adb_db_name" {
  description = "Autonomous Database DB name. Use letters and numbers only."
  type        = string
  default     = "DDSLAB"
}

variable "adb_display_name" {
  description = "Autonomous Database display name."
  type        = string
  default     = "Oracle Deep Data Security Lab"
}

variable "adb_admin_password" {
  description = "Autonomous Database ADMIN password."
  type        = string
  sensitive   = true
}

variable "adb_workload" {
  description = "Autonomous Database workload."
  type        = string
  default     = "OLTP"
}

variable "adb_db_version" {
  description = "Optional database version. Set to a Deep Data Security compatible version available in your tenancy/region."
  type        = string
  default     = null
}

variable "adb_compute_model" {
  description = "Autonomous Database compute model."
  type        = string
  default     = "ECPU"
}

variable "adb_compute_count" {
  description = "Autonomous Database compute count."
  type        = number
  default     = 2
}

variable "adb_data_storage_size_in_tbs" {
  description = "Autonomous Database storage size in TB."
  type        = number
  default     = 1
}

variable "adb_auto_scaling_enabled" {
  description = "Enable Autonomous Database autoscaling."
  type        = bool
  default     = true
}

variable "adb_license_model" {
  description = "Autonomous Database license model."
  type        = string
  default     = "LICENSE_INCLUDED"
}

variable "adb_private_endpoint_label" {
  description = "Private endpoint DNS label."
  type        = string
  default     = "ddslab"
}

variable "enable_customer_managed_key" {
  description = "Create OCI Vault and KMS key and attach it to Autonomous Database."
  type        = bool
  default     = false
}

variable "enable_compute_bastion" {
  description = "Create an optional public compute bastion."
  type        = bool
  default     = false
}

variable "bastion_availability_domain" {
  description = "Availability domain for optional compute bastion."
  type        = string
  default     = null
}

variable "bastion_shape" {
  description = "Shape for optional compute bastion."
  type        = string
  default     = "VM.Standard.E5.Flex"
}

variable "bastion_ocpus" {
  description = "OCPUs for optional flexible compute bastion."
  type        = number
  default     = 1
}

variable "bastion_memory_in_gbs" {
  description = "Memory in GB for optional flexible compute bastion."
  type        = number
  default     = 8
}

variable "bastion_image_ocid" {
  description = "Image OCID for optional compute bastion."
  type        = string
  default     = null
}

variable "bastion_ssh_public_key" {
  description = "SSH public key for optional compute bastion."
  type        = string
  default     = null
  sensitive   = true
}