variable "domain" {
  type    = string
  default = "aibook.fun"
}

variable "region" {
  type    = string
  default = "atl1"
}

variable "droplet_size" {
  type    = string
  default = "s-2vcpu-4gb-amd"
}

variable "droplet_image" {
  type    = string
  default = "ubuntu-24-04-x64"
}

variable "ssh_key_fingerprints" {
  type = list(string)
}

variable "ssh_source_cidrs" {
  description = "CIDR list allowed to reach port 22 — pin to admin IP/32 or VPN range for prod"
  type        = list(string)
  default     = ["0.0.0.0/0", "::/0"]
}

variable "do_token" {
  type      = string
  sensitive = true
}

variable "spaces_access_key" {
  type      = string
  sensitive = true
}

variable "spaces_secret_key" {
  type      = string
  sensitive = true
}

variable "spaces_encryption_key" {
  description = "DO Spaces SSE-C encryption key (32-byte AES-256, base64)"
  type        = string
  sensitive   = true
}

variable "data_volume_size_gb" {
  description = "0 = stateless (droplet local disk); >0 attaches encrypted DO block volume for Docker data-root"
  type        = number
  default     = 0
}

variable "enable_monitoring" {
  type    = bool
  default = true
}

variable "alert_email" {
  description = "Email for monitoring alerts — MUST be verified on the DO account"
  type        = string
  default     = "PLT@weown.net"
}

variable "cpu_alert_threshold" {
  type    = number
  default = 80
}

variable "memory_alert_threshold" {
  type    = number
  default = 90
}

variable "disk_alert_threshold" {
  type    = number
  default = 85
}