terraform fmt

.gitea/workflows/terraform-apply.yml

@@ -1,5 +1,5 @@
 name: Gitea Actions Demo
-run-name: ${{ gitea.actor }} is testing out Gitea Actions 🚀
+run-name: ${{ gitea.actor }} is deploying with Terraform 🚀
 
 on:
   push:
@@ -15,6 +15,10 @@ jobs:
       contents: read
       pull-requests: write
 
+    env:
+      TF_VAR_TS_AUTHKEY: ${{ secrets.TAILSCALE_KEY }}
+      TF_VAR_ssh_key: ${{ secrets.SSH_PUBLIC_KEY }}
+
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
@@ -33,12 +37,11 @@ jobs:
         working-directory: terraform
         run: terraform init
 
-
       - name: Terraform Plan
         working-directory: terraform
-        run: terraform plan 
+        run: terraform plan
 
       - name: Terraform Apply
         working-directory: terraform
-        run: terraform apply -auto-approve 
+        run: terraform apply -auto-approve
 

.gitea/workflows/terraform-destroy.yml

@@ -0,0 +1,41 @@
+name: Gitea Destroy Terraform
+run-name: ${{ gitea.actor }} triggered a Terraform Destroy 🧨
+
+on:
+  workflow_dispatch: # Manual trigger
+
+jobs:
+  destroy:
+    name: "Terraform Destroy"
+    runs-on: ubuntu-latest
+
+    permissions:
+      contents: read
+      pull-requests: write
+
+    env:
+      TF_VAR_TS_AUTHKEY: ${{ secrets.TAILSCALE_KEY }}
+      TF_VAR_ssh_key: ${{ secrets.SSH_PUBLIC_KEY }}
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Set up Terraform
+        uses: hashicorp/setup-terraform@v2
+        with:
+          terraform_version: 1.6.6
+
+      - name: Inject sensitive secrets
+        working-directory: terraform
+        run: |
+          echo 'proxmox_password = "${{ secrets.PROXMOX_PASSWORD }}"' >> terraform.tfvars
+
+      - name: Terraform Init
+        working-directory: terraform
+        run: terraform init
+
+      - name: Terraform Destroy
+        working-directory: terraform
+        run: terraform destroy -auto-approve
+

.gitea/workflows/terraform-plan.yml

@@ -4,8 +4,8 @@ run-name: ${{ gitea.actor }} is testing out Gitea Actions 🚀
 on:
   push:
     branches:
-      - stage 
+      - stage
-      - test 
+      - test
 
 jobs:
   terraform:
@@ -16,6 +16,12 @@ jobs:
       contents: read
       pull-requests: write
 
+    env:
+      TF_VAR_TAILSCALE_KEY: ${{ secrets.TAILSCALE_KEY }}
+      TF_VAR_TS_AUTHKEY: ${{ secrets.TAILSCALE_KEY }}
+      TF_VAR_ssh_key: ${{ secrets.SSH_PUBLIC_KEY }}
+
+
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4

terraform/cloud-init.tf

@@ -4,13 +4,14 @@ data "template_file" "cloud_init_alpaca" {
   template = file("${path.module}/files/cloud_init.yaml")
 
   vars = {
-    ssh_key   = file("~/.ssh/id_ed25519.pub")
+    ssh_key    = var.ssh_key
-    hostname  = "alpaca-${count.index + 1}"
+    hostname   = "alpaca-${count.index + 1}"
-    domain    = "home.arpa"
+    domain     = "home.arpa"
-    tailscale_key = var.tailscale_key
+    TS_AUTHKEY = var.TS_AUTHKEY
   }
 }
 
+
 resource "local_file" "cloud_init_alpaca" {
   count    = var.alpaca_vm_count
   content  = data.template_file.cloud_init_alpaca[count.index].rendered
@@ -21,10 +22,9 @@ resource "null_resource" "upload_cloud_init_alpaca" {
   count = var.alpaca_vm_count
 
   connection {
-    type        = "ssh"
+    type = "ssh"
-    user        = "root"
+    user = "root"
-    private_key = file("~/.ssh/id_ed25519")
+    host = var.target_node
-    host        = var.target_node
   }
 
   provisioner "file" {
@@ -39,13 +39,14 @@ data "template_file" "cloud_init_llama" {
   template = file("${path.module}/files/cloud_init.yaml")
 
   vars = {
-    ssh_key   = file("~/.ssh/id_ed25519.pub")
+    ssh_key    = var.ssh_key
-    hostname  = "llama-${count.index + 1}"
+    hostname   = "llama-${count.index + 1}"
-    domain    = "home.arpa"
+    domain     = "home.arpa"
-    tailscale_key = var.tailscale_key
+    TS_AUTHKEY = var.TS_AUTHKEY
   }
 }
 
+
 resource "local_file" "cloud_init_llama" {
   count    = var.llama_vm_count
   content  = data.template_file.cloud_init_llama[count.index].rendered
@@ -56,10 +57,9 @@ resource "null_resource" "upload_cloud_init_llama" {
   count = var.llama_vm_count
 
   connection {
-    type        = "ssh"
+    type = "ssh"
-    user        = "root"
+    user = "root"
-    private_key = file("~/.ssh/id_ed25519")
+    host = var.target_node
-    host        = var.target_node
   }
 
   provisioner "file" {

terraform/main.tf

@@ -23,14 +23,14 @@ resource "proxmox_vm_qemu" "alpacas" {
   full_clone  = false
   agent       = 1
 
-  sockets     = var.sockets
+  sockets    = var.sockets
-  cores       = var.cores
+  cores      = var.cores
-  memory      = var.memory
+  memory     = var.memory
-  scsihw      = "virtio-scsi-pci"
+  scsihw     = "virtio-scsi-pci"
-  boot        = "order=scsi0"
+  boot       = "order=scsi0"
-  ipconfig0   = "ip=dhcp"
+  ipconfig0  = "ip=dhcp"
-  cicustom    = "user=local:snippets/cloud_init_alpaca_${count.index + 1}.yaml"
+  cicustom   = "user=local:snippets/cloud_init_alpaca_${count.index + 1}.yaml"
-  depends_on  = [null_resource.upload_cloud_init_alpaca]
+  depends_on = [null_resource.upload_cloud_init_alpaca]
 
   disk {
     slot    = "scsi0"
@@ -56,14 +56,14 @@ resource "proxmox_vm_qemu" "llamas" {
   full_clone  = false
   agent       = 1
 
-  sockets     = var.sockets
+  sockets    = var.sockets
-  cores       = var.cores
+  cores      = var.cores
-  memory      = var.memory
+  memory     = var.memory
-  scsihw      = "virtio-scsi-pci"
+  scsihw     = "virtio-scsi-pci"
-  boot        = "order=scsi0"
+  boot       = "order=scsi0"
-  ipconfig0   = "ip=dhcp"
+  ipconfig0  = "ip=dhcp"
-  cicustom    = "user=local:snippets/cloud_init_llama_${count.index + 1}.yaml"
+  cicustom   = "user=local:snippets/cloud_init_llama_${count.index + 1}.yaml"
-  depends_on  = [null_resource.upload_cloud_init_llama]
+  depends_on = [null_resource.upload_cloud_init_llama]
 
   disk {
     slot    = "scsi0"

terraform/variables.tf

@@ -74,8 +74,14 @@ variable "llama_vm_count" {
   description = "How many Llama VMs to create"
 }
 
-variable "tailscale_key" {
+variable "TS_AUTHKEY" {
   type        = string
-  description = "Tailscale auth key"
+  description = "Tailscale auth key used in cloud-init"
+}
+
+
+variable "ssh_key" {
+  type        = string
+  description = "Public SSH key used by cloud-init"
 }