feat(deploy): aibook.fun deploy layer (terraform + ansible + docker on DO)

deploy/terraform/variables.tf

@@ -0,0 +1,82 @@
+variable "domain" {
+  type    = string
+  default = "aibook.fun"
+}
+
+variable "region" {
+  type    = string
+  default = "atl1"
+}
+
+variable "droplet_size" {
+  type    = string
+  default = "s-2vcpu-4gb-amd"
+}
+
+variable "droplet_image" {
+  type    = string
+  default = "ubuntu-24-04-x64"
+}
+
+variable "ssh_key_fingerprints" {
+  type = list(string)
+}
+
+variable "ssh_source_cidrs" {
+  description = "CIDR list allowed to reach port 22 — pin to admin IP/32 or VPN range for prod"
+  type        = list(string)
+  default     = ["0.0.0.0/0", "::/0"]
+}
+
+variable "do_token" {
+  type      = string
+  sensitive = true
+}
+
+variable "spaces_access_key" {
+  type      = string
+  sensitive = true
+}
+
+variable "spaces_secret_key" {
+  type      = string
+  sensitive = true
+}
+
+variable "spaces_encryption_key" {
+  description = "DO Spaces SSE-C encryption key (32-byte AES-256, base64)"
+  type        = string
+  sensitive   = true
+}
+
+variable "data_volume_size_gb" {
+  description = "0 = stateless (droplet local disk); >0 attaches encrypted DO block volume for Docker data-root"
+  type        = number
+  default     = 0
+}
+
+variable "enable_monitoring" {
+  type    = bool
+  default = true
+}
+
+variable "alert_email" {
+  description = "Email for monitoring alerts — MUST be verified on the DO account"
+  type        = string
+  default     = "PLT@weown.net"
+}
+
+variable "cpu_alert_threshold" {
+  type    = number
+  default = 80
+}
+
+variable "memory_alert_threshold" {
+  type    = number
+  default = 90
+}
+
+variable "disk_alert_threshold" {
+  type    = number
+  default = 85
+}