# ⚠️  NEVER commit terraform.tfvars with real values. Use ./itofu.sh instead —
# it reads TF_VAR_* straight from Infisical /tofu/.

do_token = "<YOUR_DIGITALOCEAN_TOKEN>"

ssh_key_fingerprints = ["<YOUR_SSH_KEY_FINGERPRINT>"]

# pin to admin IP/32 or VPN range for prod
ssh_source_cidrs = ["0.0.0.0/0", "::/0"]

spaces_access_key     = "<YOUR_SPACES_ACCESS_KEY>"
spaces_secret_key     = "<YOUR_SPACES_SECRET_KEY>"
spaces_encryption_key = "<YOUR_SSE_C_KEY_BASE64>"

domain        = "aibook.fun"
region        = "atl1"
droplet_size  = "s-2vcpu-4gb-amd"
droplet_image = "ubuntu-24-04-x64"

data_volume_size_gb = 0

enable_monitoring = true
# MUST be verified on the DO account
alert_email            = "PLT@weown.net"
cpu_alert_threshold    = 80
memory_alert_threshold = 90
disk_alert_threshold   = 85