# aibook-fun - Terraform Backend Configuration
# State stored in DigitalOcean Spaces (S3-compatible) for team sharing, SSE-C
# encrypted at rest.
#
# Pass credentials via itofu.sh (preferred) or -backend-config flags:
#   access_key / secret_key / sse_customer_key
# Backend config cannot reference Terraform variables — itofu.sh forwards them.

terraform {
  backend "s3" {
    endpoint = "https://atl1.digitaloceanspaces.com"
    bucket   = "weown-tools-state"
    key      = "aibook-fun/aibook-fun.tfstate"
    region   = "us-east-1"
    encrypt  = true
    acl      = "private"

    # Required for DO Spaces (S3-compatible but not AWS)
    skip_credentials_validation = true
    skip_metadata_api_check     = true
    skip_requesting_account_id  = true
    skip_region_validation      = true
    skip_s3_checksum            = true
  }
}