# Copy this file to terraform.tfvars and replace organization-specific values.
# Put the API token only in secrets.auto.tfvars, never in this file.

# Existing organization created manually in the Nubes personal account.
organization = "REPLACE_WITH_ORGANIZATION_NAME_OR_UUID"

# Exact IP space visible to this organization in the personal account.
ip_space_name = "internet-no-antiddos-v1"

# Tested minimum for this VM-only PROD chain. Two IPs left no free address
# when the VM requested its external IP; three allowed the deployment to start.
org_vip_count = 3

# API endpoint for the PROD stand.
api_endpoint = "https://lk-api-gateway.ngcloud.ru/api/v1/svc"

# Unique VDC service name.
vdc_resource_name = "vm-minimal-vdc"

# Values from the tested PROD resource pool. Replace with values available
# to the manually created organization if its resource pool differs.
vdc_network_provider = "msk1"
vdc_provider_vdc     = "Intel Cascade Lake 3.1"

# VDC capacity: vCPU, guaranteed share (0/50/80), and RAM in GB.
vdc_cpu_allocated  = 8
vdc_cpu_guaranteed = 0
vdc_mem_allocated  = 200

# JSON array of storage policies available to the selected Provider VDC.
# Confirm the policy name and size in the personal account before applying.
vdc_storage_config = "[{\"name\":\"SSD SDS\",\"size\":\"2000\"}]"

# Unique Edge service name.
nsxt_resource_name = "vm-minimal-edge"

# Non-overlapping /24 routed subnet plus primary and secondary VM DNS servers.
nsxt_ip_addr_pool = "10.10.102.0/24"
nsxt_main_dns     = "81.22.46.22"
nsxt_second_dns   = "185.247.187.77"

# Unique vApp service name and vApp name.
vapp_resource_name = "vm-minimal-vapp"
vapp_name          = "vm-minimal-vapp"

# Unique VM service name and hostname/IP-set name.
vm_resource_name = "vm-minimal"
vm_name          = "vm-minimal"

# Tested VM sizing: Ubuntu base image (20 GB) plus 128 GB additional disk.
vm_image = "Ubuntu_22-20G"
vm_cpu   = 2
vm_ram   = 4
vm_disk  = 128

# Linux account name and your OpenSSH PUBLIC key.
vm_user_login      = "ubuntu"
vm_user_public_key = "ssh-ed25519 REPLACE_WITH_YOUR_PUBLIC_KEY"

# Inbound ports. Narrow the source CIDR below to trusted addresses.
vm_access_port_list = [
  { port = "22", type = "tcp" },
  { port = "80", type = "tcp" }
]
vm_access_ip_list = ["REPLACE_WITH_YOUR_PUBLIC_IP/32"]

# The tested VM gets its own external IP; do not change without checking
# the consequences for inbound access.
vm_same_snat = true

# Keep both triggers null for initial creation. To request an operation later,
# set its marker to a new, unique value.
git_revision      = null
reconcile_trigger = null