a47e0cb947
GP1-S instance (8 vCPU, 32GB, 100GB root) provisioned via Terraform with cloud-init: Docker CE, Tailscale (pre-auth key), Gitea Actions runner (act_runner v0.3.0). Security group drops all inbound — access via Tailscale only. Solves: Kapsule pods cannot reach Tailscale IPs. Also stores Tailscale API key in SCW Secret Manager for future auth key generation. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
16 lines
329 B
HCL
16 lines
329 B
HCL
variable "region" {
|
|
description = "Scaleway region for secret manager"
|
|
type = string
|
|
}
|
|
|
|
variable "project_id" {
|
|
description = "Scaleway project ID"
|
|
type = string
|
|
}
|
|
|
|
variable "tailscale_api_key" {
|
|
description = "Tailscale API key for generating pre-auth keys"
|
|
type = string
|
|
sensitive = true
|
|
}
|