feat(deploy): aibook.fun deploy layer (terraform + ansible + docker on DO)

2026-09-02 10:57:09 +02:00
parent 89a3d76122
commit 8ef06cb3e7
21 changed files with 1106 additions and 0 deletions
@@ -0,0 +1,27 @@
+# ⚠️  NEVER commit terraform.tfvars with real values. Use ./itofu.sh instead —
+# it reads TF_VAR_* straight from Infisical /tofu/.
+
+do_token = "<YOUR_DIGITALOCEAN_TOKEN>"
+
+ssh_key_fingerprints = ["<YOUR_SSH_KEY_FINGERPRINT>"]
+
+# pin to admin IP/32 or VPN range for prod
+ssh_source_cidrs = ["0.0.0.0/0", "::/0"]
+
+spaces_access_key     = "<YOUR_SPACES_ACCESS_KEY>"
+spaces_secret_key     = "<YOUR_SPACES_SECRET_KEY>"
+spaces_encryption_key = "<YOUR_SSE_C_KEY_BASE64>"
+
+domain        = "aibook.fun"
+region        = "atl1"
+droplet_size  = "s-2vcpu-4gb-amd"
+droplet_image = "ubuntu-24-04-x64"
+
+data_volume_size_gb = 0
+
+enable_monitoring = true
+# MUST be verified on the DO account
+alert_email            = "PLT@weown.net"
+cpu_alert_threshold    = 80
+memory_alert_threshold = 90
+disk_alert_threshold   = 85