## Summary `block_ips = ["185.172.53.0"]` was duplicated in both `bunnynet_pullzone` resources in `cdn.tf`. Move it to a typed `cdn_block_ips` variable in `vars.tf` with the existing IP as the default. - No plan diff on apply — same value, just sourced from `var.cdn_block_ips` instead of a literal. - Adding/removing IPs is now a one-line var override (or a default change) instead of two edits in the resource bodies. ## Interaction with #80 (for_each refactor) `#80` collapses the two pullzones to `bunnynet_pullzone.this[for_each]`. Either order works; whichever lands second is a trivial one-line rebase on the surviving `block_ips =` line. Reviewed-on: #81
27 lines
505 B
HCL
27 lines
505 B
HCL
variable "HETZNER_S3_ACCESS_KEY_K3S" {
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "HETZNER_S3_SECRET_KEY_K3S" {
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "B2_S3_ACCESS_KEY" {
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "B2_S3_SECRET_KEY" {
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "cdn_block_ips" {
|
|
description = "IP addresses to block at the BunnyCDN pullzones (cran.devxy.io, cran.rpkgs.com)."
|
|
type = list(string)
|
|
default = [
|
|
"185.172.53.0",
|
|
]
|
|
}
|