🚀: add vars

.gitignore

@@ -10,13 +10,6 @@
 crash.log
 crash.*.log
 
-# Exclude all .tfvars files, which are likely to contain sensitive data, such as
-# password, private keys, and other secrets. These should not be part of version 
-# control as they are data points which are potentially sensitive and subject 
-# to change depending on the environment.
-*.tfvars
-*.tfvars.json
-
 # Ignore override files as they are usually used to override resources locally and so
 # are not checked in
 override.tf

vars/bck/terraform.tfvars

@@ -0,0 +1,16 @@
+url    = "localhost:3903"
+scheme = "http"
+
+keys = ["backup-key"]
+
+buckets = {
+  backup = {
+    allowed_keys = {
+      "backup-key" = {
+        read  = true
+        write = true
+        owner = true
+      }
+    }
+  }
+}

vars/prd/terraform.tfvars

@@ -0,0 +1,73 @@
+url = "admin.garage.mateu.be"
+
+keys = [
+  "opentofu-key",
+  "nextcloud-libertus-key",
+  "peertube-ndfr-key",
+  "mastodon-ndfr-key",
+]
+
+buckets = {
+  opentofu = {
+    allowed_keys = {
+      "opentofu-key" = {
+        read  = true
+        write = true
+        owner = true
+      }
+    }
+  }
+  nextcloud-libertus = {
+    allowed_keys = {
+      "nextcloud-libertus-key" = {
+        read  = true
+        write = true
+        owner = true
+      }
+    }
+  }
+  mastodon-ndfr = {
+    allowed_keys = {
+      "mastodon-ndfr-key" = {
+        read  = true
+        write = true
+        owner = true
+      }
+    }
+    website_access_enabled = true
+    aliases                = ["medias.m.nintendojo.fr"]
+  }
+  peertube-videos-ndfr = {
+    allowed_keys = {
+      "peertube-ndfr-key" = {
+        read  = true
+        write = true
+        owner = true
+      }
+    }
+    website_access_enabled = true
+    aliases                = ["videos.p.nintendojo.fr"]
+  }
+  peertube-playlists-ndfr = {
+    allowed_keys = {
+      "peertube-ndfr-key" = {
+        read  = true
+        write = true
+        owner = true
+      }
+    }
+    website_access_enabled = true
+    aliases                = ["playlists.p.nintendojo.fr"]
+  }
+  peertube-original-ndfr = {
+    allowed_keys = {
+      "peertube-ndfr-key" = {
+        read  = true
+        write = true
+        owner = true
+      }
+    }
+    website_access_enabled = true
+    aliases                = ["original.p.nintendojo.fr"]
+  }
+}