pat-s
233dbfbdfd
block_ips was hardcoded in both pullzones as a single IP
("185.172.53.0"). Move it to a variable so updates don't require
editing the resource bodies (and so a future for_each refactor
doesn't bake the list into the map).
Default keeps the existing entry; no plan diff on apply.
27 lines
505 B
HCL
27 lines
505 B
HCL
variable "HETZNER_S3_ACCESS_KEY_K3S" {
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "HETZNER_S3_SECRET_KEY_K3S" {
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "B2_S3_ACCESS_KEY" {
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "B2_S3_SECRET_KEY" {
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "cdn_block_ips" {
|
|
description = "IP addresses to block at the BunnyCDN pullzones (cran.devxy.io, cran.rpkgs.com)."
|
|
type = list(string)
|
|
default = [
|
|
"185.172.53.0",
|
|
]
|
|
}
|