59 lines
3.5 KiB
Text
59 lines
3.5 KiB
Text
# ncm uses opentofu/terraform to provision infrastrucutre. By default, infrastructure state may be stored in any s3-compatible object store.
|
|
# Despite the name of this variables, this access key may not be for AWS (Amazon Web Services)
|
|
#
|
|
# AWS_ACCESS_KEY_ID is the access key for reading/writing opentofu/terraform state to/from a s3-compatible object store
|
|
export AWS_ACCESS_KEY_ID=<AWS_ACCESS_KEY_ID>
|
|
|
|
# ncm uses opentofu/terraform to provision infrastrucutre. By default, infrastructure state may be stored in any s3-compatible object store
|
|
# Despite the name of this variables, this access key need not be for AWS (Amazon Web Services)
|
|
#
|
|
# AWS_SECRET_ACCESS_KEY is the secret access key for reading/writing opentofu/terraform to/from a s3-compatible object store
|
|
export AWS_SECRET_ACCESS_KEY=<AWS_SECRET_ACCESS_KEY>
|
|
|
|
# Tailscale key to join the Tailnet
|
|
export TF_VAR_tailscale_auth_key=<TF_VAR_tailscale_auth_key>
|
|
|
|
# The SSH public key of the admin user who is able to SSH into created nodes
|
|
export TF_VAR_admin_ssh_public_key=<TF_VAR_admin_ssh_public_key>
|
|
|
|
# Nodes linode CLI PAT (Created at https://cloud.linode.com/profile/tokens)
|
|
export TF_VAR_nodes_linode_cli_pat=<TF_VAR_nodes_linode_cli_pat>
|
|
|
|
# The region in which to create compute nodes
|
|
## Hetzner
|
|
## Use `hcloud location list` to get a list of "network zones" to use here
|
|
export TF_VAR_compute_provider_region=<TF_VAR_compute_provider_region>
|
|
# export TF_VAR_compute_provider_region=<TF_VAR_compute_provider_region>
|
|
|
|
# The API Token for your provider's DNS API
|
|
export TF_VAR_dns_access_token=<TF_VAR_dns_access_token>
|
|
|
|
# Hetzner DNS API tokens (used by dns/)
|
|
export TF_VAR_hetzner_dns_access_token=<TF_VAR_hetzner_dns_access_token>
|
|
export TF_VAR_hetzner_dns_access_token_new=<TF_VAR_hetzner_dns_access_token_new>
|
|
|
|
# The Backblaze B2 access key/secret for managing the opencloud bucket
|
|
export TF_VAR_opencloud_b2_access_key=<TF_VAR_opencloud_b2_access_key>
|
|
export TF_VAR_opencloud_b2_secret_key=<TF_VAR_opencloud_b2_secret_key>
|
|
export TF_VAR_opencloud_jwt_secret=<TF_VAR_opencloud_jwt_secret>
|
|
export TF_VAR_opencloud_transfer_secret=<TF_VAR_opencloud_transfer_secret>
|
|
export TF_VAR_opencloud_url_signing_secret=<TF_VAR_opencloud_url_signing_secret>
|
|
export TF_VAR_opencloud_admin_password=<TF_VAR_opencloud_admin_password>
|
|
export TF_VAR_opencloud_initial_admin_password=<TF_VAR_opencloud_initial_admin_password>
|
|
export TF_VAR_opencloud_machine_auth_api_key=<TF_VAR_opencloud_machine_auth_api_key>
|
|
export TF_VAR_opencloud_system_user_id=<TF_VAR_opencloud_system_user_id>
|
|
export TF_VAR_opencloud_idm_svc_password=<TF_VAR_opencloud_idm_svc_password>
|
|
export TF_VAR_opencloud_idm_revasvc_password=<TF_VAR_opencloud_idm_revasvc_password>
|
|
export TF_VAR_opencloud_idm_idpsvc_password=<TF_VAR_opencloud_idm_idpsvc_password>
|
|
export TF_VAR_opencloud_storage_users_mount_id=<TF_VAR_opencloud_storage_users_mount_id>
|
|
export TF_VAR_opencloud_system_user_api_key=<TF_VAR_opencloud_system_user_api_key>
|
|
export TF_VAR_opencloud_service_account_id=<TF_VAR_opencloud_service_account_id>
|
|
export TF_VAR_opencloud_service_account_secret=<TF_VAR_opencloud_service_account_secret>
|
|
export TF_VAR_opencloud_admin_user_id=<TF_VAR_opencloud_admin_user_id>
|
|
export TF_VAR_opencloud_graph_application_id=<TF_VAR_opencloud_graph_application_id>
|
|
export TF_VAR_opencloud_idm_admin_password=<TF_VAR_opencloud_idm_admin_password>
|
|
|
|
# Backblaze B2 master key — used by the deploy module to manage buckets and scoped keys
|
|
# Must have: listBuckets, createBuckets, writeKeys capabilities
|
|
export B2_APPLICATION_KEY_ID=<B2_APPLICATION_KEY_ID>
|
|
export B2_APPLICATION_KEY=<B2_APPLICATION_KEY>
|