# HCP workspace variables for forgejo-prod. Do not commit a real tfvars file.
#
# existing_vpc_id            = "<afterhours-shift-manager output vpc_id>"
# existing_public_subnet_ids = ["<public subnet a>", "<public subnet b>"]
#
# ami_id is pinned in variables.tf. Replace that default on purpose when the
# instance should move to a new AL2023 arm64 image. Lookup:
#   aws ssm get-parameter \
#     --name /aws/service/ami-amazon-linux-latest/al2023-ami-kernel-default-arm64 \
#     --region us-east-1 --query Parameter.Value --output text
#
# enable_https     = false
# enable_schedules = false
#
# Workspace environment variables, never a project variable set:
#   TFC_AWS_PROVIDER_AUTH=true
#   TFC_AWS_APPLY_ROLE_ARN / TFC_AWS_PLAN_ROLE_ARN
# First apply points those ARNs at hcptf-bootstrap / hcptf-bootstrap-plan.
# After that apply, point them at hcptf-forgejo / hcptf-forgejo-plan.