kubeconfig_path = "cluster-config/kubeconfig"
cluster_domain  = "riotpiao.homelab.com"

# Backend S3 credentials (MinIO)
# Set via environment variables instead:
#   export AWS_ACCESS_KEY_ID=$(grep MINIO_ROOT_USER .env | cut -d= -f2)
#   export AWS_SECRET_ACCESS_KEY=$(grep MINIO_ROOT_PASSWORD .env | cut -d= -f2)
s3_access_key = ""
s3_secret_key = ""

# Vault token for terraform vault provider
# Set via environment variable:
#   export VAULT_TOKEN=$(vault login -method=oidc ...)
vault_token = ""

# Cluster secrets loaded from .env (extract via 'vsource' alias)
# Or populate these manually from Vault/secrets manager
authentik_secret_key              = "changeme-min-32-characters-long-value"
authentik_bootstrap_password      = "changeme"
authentik_bootstrap_token         = "changeme"
authentik_pg_password             = "changeme"
postgres_password                 = "changeme"
minio_root_user                   = "minioadmin"
minio_root_password               = "changeme"
minio_oidc_client_secret          = "changeme"
grafana_admin_password            = "changeme"
grafana_oidc_client_secret        = "changeme"
forgejo_admin_password            = "changeme"
authentik_forgejo_client_secret   = "changeme"
authentik_argocd_client_id        = "argocd"
authentik_argocd_client_secret    = "changeme"
authentik_temporal_client_id      = "temporal"
authentik_temporal_client_secret  = "changeme"
argocd_admin_password             = "changeme"
argocd_oidc_client_secret         = "changeme"