foxhunt/terraform/runpod/main.tf

terraform {
  required_providers {
    runpod = {
      source  = "runpod/runpod"
      version = "~> 1.6.0"
    }
  }
  required_version = ">= 1.0"
}

provider "runpod" {
  api_key = var.runpod_api_key
}

# Network Volume for persistent storage
resource "runpod_network_volume" "foxhunt_volume" {
  name              = var.volume_name
  size              = var.volume_size_gb
  data_center_id    = var.data_center_id
}

# Pod Definition
resource "runpod_pod" "foxhunt_trading_pod" {
  name               = var.pod_name
  image_name         = var.docker_image
  gpu_type_id        = var.gpu_type
  cloud_type         = var.cloud_type
  data_center_id     = var.data_center_id
  country_code       = var.country_code
  gpu_count          = var.gpu_count
  volume_in_gb       = var.container_disk_size_gb
  container_disk_in_gb = var.container_disk_size_gb
  volume_mount_path  = "/runpod-volume"

  # Link network volume
  network_volume_id = runpod_network_volume.foxhunt_volume.id

  # Ports for services
  ports = "50051/http,50052/http,50053/http,50054/http,50055/http,8080/http,9091/http,5432/tcp,6379/tcp"

  # Non-sensitive environment variables (safe for Terraform state)
  # ALL CREDENTIALS loaded from /runpod-volume/.env via --env-file flag
  env = [
    {
      key   = "RUST_LOG"
      value = var.rust_log_level
    },
    {
      key   = "POSTGRES_HOST"
      value = "localhost"
    },
    {
      key   = "POSTGRES_PORT"
      value = "5432"
    },
    {
      key   = "POSTGRES_DB"
      value = var.postgres_db
    },
    {
      key   = "POSTGRES_USER"
      value = var.postgres_user
    },
    {
      key   = "REDIS_URL"
      value = "redis://localhost:6379"
    },
    {
      key   = "VAULT_ADDR"
      value = "http://localhost:8200"
    },
    {
      key   = "CUDA_VISIBLE_DEVICES"
      value = "0"
    },
    {
      key   = "API_GATEWAY_PORT"
      value = "50051"
    },
    {
      key   = "TRADING_SERVICE_PORT"
      value = "50052"
    },
    {
      key   = "BACKTESTING_SERVICE_PORT"
      value = "50053"
    },
    {
      key   = "ML_TRAINING_SERVICE_PORT"
      value = "50054"
    },
    {
      key   = "TRADING_AGENT_SERVICE_PORT"
      value = "50055"
    },
    {
      key   = "DEPLOYMENT_ENV"
      value = var.deployment_env
    }
  ]

  # Load ALL credentials from mounted volume .env file
  # Required credentials in /runpod-volume/.env:
  #   - POSTGRES_PASSWORD
  #   - VAULT_TOKEN
  #   - DATABENTO_API_KEY
  #   - JWT_SECRET
  docker_args = "--pull always --env-file /runpod-volume/.env"

  # Start command (override if needed)
  start_script = var.start_script

  # Support files (will be uploaded to volume)
  support_public_ip = var.enable_public_ip

  # Template ID (optional - leave empty to use custom image)
  template_id = var.template_id
}

# Optional: Endpoint for HTTP access
resource "runpod_endpoint" "foxhunt_api_endpoint" {
  count = var.enable_endpoint ? 1 : 0

  name            = "${var.pod_name}-api-endpoint"
  gpu_ids         = var.gpu_type
  workers_min     = 1
  workers_max     = var.max_workers
  idle_timeout    = var.idle_timeout_seconds
  execution_timeout = var.execution_timeout_seconds
  gpu_count       = var.gpu_count

  template_id     = var.template_id
  network_volume_id = runpod_network_volume.foxhunt_volume.id
}