a47e0cb947
GP1-S instance (8 vCPU, 32GB, 100GB root) provisioned via Terraform with cloud-init: Docker CE, Tailscale (pre-auth key), Gitea Actions runner (act_runner v0.3.0). Security group drops all inbound — access via Tailscale only. Solves: Kapsule pods cannot reach Tailscale IPs. Also stores Tailscale API key in SCW Secret Manager for future auth key generation. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
46 lines
1.1 KiB
HCL
46 lines
1.1 KiB
HCL
resource "random_password" "jwt_secret" {
|
|
length = 64
|
|
special = false
|
|
}
|
|
|
|
resource "random_password" "db_password" {
|
|
length = 32
|
|
special = false
|
|
}
|
|
|
|
resource "scaleway_secret" "jwt" {
|
|
name = "foxhunt-jwt-secret"
|
|
project_id = var.project_id
|
|
region = var.region
|
|
}
|
|
|
|
resource "scaleway_secret_version" "jwt" {
|
|
secret_id = scaleway_secret.jwt.id
|
|
data = base64encode(random_password.jwt_secret.result)
|
|
region = var.region
|
|
}
|
|
|
|
resource "scaleway_secret" "db_password" {
|
|
name = "foxhunt-db-password"
|
|
project_id = var.project_id
|
|
region = var.region
|
|
}
|
|
|
|
resource "scaleway_secret_version" "db_password" {
|
|
secret_id = scaleway_secret.db_password.id
|
|
data = base64encode(random_password.db_password.result)
|
|
region = var.region
|
|
}
|
|
|
|
resource "scaleway_secret" "tailscale_api_key" {
|
|
name = "foxhunt-tailscale-api-key"
|
|
project_id = var.project_id
|
|
region = var.region
|
|
}
|
|
|
|
resource "scaleway_secret_version" "tailscale_api_key" {
|
|
secret_id = scaleway_secret.tailscale_api_key.id
|
|
data = base64encode(var.tailscale_api_key)
|
|
region = var.region
|
|
}
|