Initial Commit

apps/example-prod.tfvars

@@ -0,0 +1,27 @@
+# ─── Remote Host ──────────────────────────────────────────────────────────────
+ssh_host     = "prod-server.example.com"
+ssh_user     = "deploy"
+# ssh_key_path is supplied at runtime by CI/CD from gopass — not stored here.
+
+# ─── App Identity ─────────────────────────────────────────────────────────────
+app_name    = "myapp"
+environment = "prod"  # named Docker volumes, data persists across container restarts
+
+# ─── OpenResty: git_clone mode ────────────────────────────────────────────────
+# The OpenResty Alpine image starts, installs git via apk, then clones the repo.
+# Pin to a tag or full commit SHA — never use a branch name in prod.
+# The repo must contain an 'openresty/' directory with a valid nginx.conf.
+openresty_source_type   = "git_clone"
+openresty_git_repo      = "https://gitea.example.com/myorg/myapp-openresty.git"
+openresty_git_ref       = "v1.4.2"           # pinned tag — never 'main' in prod
+# openresty_git_token is supplied at runtime by CI/CD from gopass — not stored here.
+openresty_external_port = 80
+
+# ─── PostgreSQL ───────────────────────────────────────────────────────────────
+db_name     = "myapp_prod"
+db_user     = "myapp"
+# db_password is supplied at runtime by CI/CD from gopass — not stored here.
+
+# ─── Images (optional overrides) ──────────────────────────────────────────────
+# postgres_image = "postgres:16-alpine"
+# redis_image    = "redis:7-alpine"