variable "os_project_data" {
  type = map(string)
  default = {
    id = "1b45adf388934758b56d0dfdb4bfacf3"
  }
}

variable "networks_list" {
  type = map(string)
  default = {
    shared_postgresql = "postgresql-srv-net"
    storage_nfs       = "StorageNFS"
    octavia_main_lb   = "octavia-main-lb"
  }
}

variable "shared_postgresql_server_data" {
  type = map(string)
  default = {
    name                  = "shared-postgresql-server"
    flavor                = "m1.large"
    vol_data_name         = "shared-postgresql-data"
    vol_data_size         = "100"
    vol_data_device       = "/dev/vdb"
    network_name          = "postgresql-srv-net"
    network_description   = "Network used to communicate with the shared postgresql service"
    network_cidr          = "192.168.0.0/22"
    allocation_pool_start = "192.168.0.100"
    allocation_pool_end   = "192.168.3.254"
    server_ip             = "192.168.0.5"
    server_cidr           = "192.168.0.5/22"
  }
}

# Git over SSH, published by the load balancers instead of a floating IP on the
# forgejo VM:
#
#   client -> Octavia TCP 22 -> HAPROXY L7 tcp 2222 -> forgejo 2222
#
# The public port stays 22, so the clone URLs need no port. The HAPROXY L7 hosts
# cannot listen on 22 either, sshd is there
variable "git_ssh_data" {
  type = object({
    public_port       = number
    haproxy_bind_port = number
  })
  default = {
    public_port       = 22
    haproxy_bind_port = 2222
  }
}

variable "basic_services_ip" {
  type = map(string)
  default = {
    ca                = "10.10.0.4"
    ca_cidr           = "10.10.0.4/32"
    ssh_jump          = "10.10.0.5"
    ssh_jump_cidr     = "10.10.0.5/32"
    prometheus        = "10.10.0.10"
    prometheus_cidr   = "10.10.0.10/32"
    haproxy_l7_1      = "10.10.0.11"
    haproxy_l7_1_cidr = "10.10.0.11/32"
    haproxy_l7_2      = "10.10.0.12"
    haproxy_l7_2_cidr = "10.10.0.12/32"
    octavia_main      = "10.10.0.20"
    octavia_main_cidr = "10.10.0.20/32"
    # Services deployed by their own workspaces. The sizing of each one is a
    # default of its module, under ../../modules; the addresses live here so
    # that the whole plan is visible in one place
    postgresql      = "10.10.0.162"
    postgresql_cidr = "10.10.0.162/32"
    keycloak_1      = "10.10.0.163"
    keycloak_1_cidr = "10.10.0.163/32"
    keycloak_2      = "10.10.0.164"
    keycloak_2_cidr = "10.10.0.164/32"
    forgejo         = "10.10.0.165"
    forgejo_cidr    = "10.10.0.165/32"
  }
}

variable "main_haproxy_l7_ip" {
  type    = list(string)
  default = ["10.10.0.11", "10.10.0.12"]
}

variable "security_group_list" {
  type = map(string)
  default = {
    postgresql                             = "PostgreSQL service"
    haproxy                                = "traffic_from_main_lb_to_haproxy_l7"
    public_https                           = "Public HTTPS"
    limited_SSH_access                     = "Limited SSH access"
    docker_swarm                           = "Docker Swarm"
    http_and_https_from_the_load_balancers = "traffic_from_the_main_load_balancers"
    limited_HTTPS_access                   = "restricted_web_service"
  }
}

variable "main_octavia_lb_name" {
  default = "s2i2s-cloud-l4-load-balancer"
}

variable "main_octavia_lb_description" {
  default = "Main L4 load balancer for the S2I2S services"
}

variable "haproxy_l7_data" {
  type = map(string)
  default = {
    name     = "main-haproxy-l7"
    flavor   = "m1.medium"
    vm_count = "2"
  }
}

variable "prometheus_server_data" {
  type = map(string)
  default = {
    name                       = "prometheus"
    flavor                     = "m1.medium"
    vol_data_name              = "prometheus-data"
    vol_data_size              = "100"
    vol_data_device            = "/dev/vdb"
    public_grafana_server_cidr = "146.48.28.103/32"
  }
}