# terraform.tfvars.example — copy to terraform.tfvars and edit.
#
# NOTE on secrets/gitignore: real *.tfvars are gitignored (root .gitignore) so
# local values never land in git. This *.example file is safe to commit — it
# carries NO private material (SSH *public* key only). Never put a private key here.
#
# Defaults for everything below already encode the LOCKED PHASE1-SCOPE decisions;
# the ONLY required value is ssh_authorized_key.

# REQUIRED — your SSH *public* key (contents of e.g. ~/.ssh/id_ed25519.pub).
ssh_authorized_key = "ssh-ed25519 AAAA...replace-with-your-public-key... user@host"

# --- optional overrides (defaults shown) -----------------------------------

# libvirt_uri   = "qemu:///system"
# pool_name     = "default"

# node_count       = 3
# node_name_prefix = "k3s-dev-"
# node_ips         = ["10.73.0.11", "10.73.0.12", "10.73.0.13"]

# vcpu          = 4
# memory_mib    = 6144
# os_disk_gib   = 20
# data_disk_gib = 40
# cpu_mode      = "host-passthrough"

# network_name    = "k3s-dev"
# network_cidr    = "10.73.0.0/24"
# network_gateway = "10.73.0.1"
# network_prefix  = 24

# login_user  = "k3s"
# node_domain = "k3s.dev.local"

# Point at a locally pre-downloaded image to avoid re-fetching on each apply:
# image_source = "/var/lib/libvirt/images/debian-12-genericcloud-amd64.qcow2"