# Trusted Services (2000-2999)
#
# Infrastructure services that support development and operations.
# All VMs in this tier use the "infrastructure" Nebula group.
#
# VMs:
#   2000  vault-01  192.168.100.20  - Vault cluster node 1
#   2001  vault-02  192.168.100.21  - Vault cluster node 2
#   2002  vault-03  192.168.100.22  - Vault cluster node 3
#   2003  gitea     192.168.100.23  - Git hosting

module "vault-01" {
  source       = "./modules/vm"
  name         = "vault-01"
  vmid         = 2000
  node_name    = var.proxmox_node
  bridge_ip    = "192.168.100.20"
  gateway      = var.gateway
  datastore_id = var.datastore_id
  clone_vmid   = var.template_vmid
  cores        = 2
  memory       = 2048
  disk_size    = 50
  username     = var.username
  password     = var.password
  ssh_key_path = var.ssh_key_path
}

module "vault-02" {
  source       = "./modules/vm"
  name         = "vault-02"
  vmid         = 2001
  node_name    = var.proxmox_node
  bridge_ip    = "192.168.100.21"
  gateway      = var.gateway
  datastore_id = var.datastore_id
  clone_vmid   = var.template_vmid
  cores        = 2
  memory       = 2048
  disk_size    = 50
  username     = var.username
  password     = var.password
  ssh_key_path = var.ssh_key_path
}

module "vault-03" {
  source       = "./modules/vm"
  name         = "vault-03"
  vmid         = 2002
  node_name    = var.proxmox_node
  bridge_ip    = "192.168.100.22"
  gateway      = var.gateway
  datastore_id = var.datastore_id
  clone_vmid   = var.template_vmid
  cores        = 2
  memory       = 2048
  disk_size    = 50
  username     = var.username
  password     = var.password
  ssh_key_path = var.ssh_key_path
}

module "gitea" {
  source       = "./modules/vm"
  name         = "gitea"
  vmid         = 2003
  node_name    = var.proxmox_node
  bridge_ip    = "192.168.100.23"
  gateway      = var.gateway
  datastore_id = var.datastore_id
  clone_vmid   = var.template_vmid
  cores        = 2
  memory       = 2048
  disk_size    = 100
  username     = var.username
  password     = var.password
  ssh_key_path = var.ssh_key_path
}