output "instance_id" {
  description = "Forgejo instance. Use with SSM Session Manager."
  value       = aws_instance.forgejo.id
}

output "private_ip" {
  value = aws_instance.forgejo.private_ip
}

output "alb_dns_name" {
  description = "Proof hostname before the mgmt Route53 flip. Not forgejo.seahaven.com."
  value       = aws_lb.forgejo.dns_name
}

output "alb_zone_id" {
  description = "Alias target zone for the out-of-band record in Z06652411XKH89KTZD3XA."
  value       = aws_lb.forgejo.zone_id
}

output "acm_validation_records" {
  description = "Create these in the mgmt seahaven.com zone before setting enable_https."
  value = [
    for record in aws_acm_certificate.forgejo.domain_validation_options : {
      name  = record.resource_record_name
      type  = record.resource_record_type
      value = record.resource_record_value
    }
  ]
}

output "backup_bucket" {
  value = aws_s3_bucket.backups.id
}

output "replica_bucket" {
  value = aws_s3_bucket.replica.id
}

output "data_volume_id" {
  value = aws_ebs_volume.data.id
}

output "secret_arns" {
  description = "Name-prefix ARNs. Secret values are not in this state."
  value       = local.secret_arns
}