# versions.tf — OpenTofu + provider pins (Phase 1 T-1.1).
#
# Toolchain is pinned to match the dev container (infra/devcontainer/versions.env):
#   OpenTofu 1.9.0. The dmacvicar/libvirt provider is pinned HERE (not in the
#   dev container) per the note in that file.
#
# AUTHOR-ONLY: this module is written but NOT applied. The PM static-validates
# with `tofu fmt -check` / `tofu validate` in the dev container.

terraform {
  required_version = "1.9.0"

  required_providers {
    libvirt = {
      source  = "dmacvicar/libvirt"
      version = "~> 0.8.1"
    }
  }
}

provider "libvirt" {
  # System-level libvirt (qemu:///system) so VMs/pools/networks are host-wide,
  # matching the dev-container mount of the host libvirt socket (PHASE1-SCOPE risks).
  uri = var.libvirt_uri
}