.gitea/workflows/terraform-apply.yml

@@ -16,7 +16,6 @@ jobs:
       pull-requests: write
 
     env:
-      TF_VAR_SSH_KEY: ${{ secrets.SSH_KEY }}
       TF_VAR_TS_AUTHKEY: ${{ secrets.TAILSCALE_KEY }}
       TF_VAR_ssh_key: ${{ secrets.SSH_PUBLIC_KEY }}
 

.gitea/workflows/terraform-destroy.yml

@@ -14,10 +14,8 @@ jobs:
       pull-requests: write
 
     env:
-        TF_VAR_SSH_KEY: ${{ secrets.SSH_KEY }}
+      TF_VAR_TS_AUTHKEY: ${{ secrets.TAILSCALE_KEY }}
-        TF_VAR_TS_AUTHKEY: ${{ secrets.TAILSCALE_KEY }}
+      TF_VAR_ssh_key: ${{ secrets.SSH_PUBLIC_KEY }}
-        TF_VAR_ssh_key: ${{ secrets.SSH_PUBLIC_KEY }}
-
 
     steps:
       - name: Checkout repository

.gitea/workflows/terraform-plan.yml

@@ -17,10 +17,11 @@ jobs:
       pull-requests: write
 
     env:
-      TF_VAR_SSH_KEY: ${{ secrets.SSH_KEY }}
+      TF_VAR_TAILSCALE_KEY: ${{ secrets.TAILSCALE_KEY }}
       TF_VAR_TS_AUTHKEY: ${{ secrets.TAILSCALE_KEY }}
       TF_VAR_ssh_key: ${{ secrets.SSH_PUBLIC_KEY }}
 
+
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4

terraform/cloud-init.tf

@@ -4,7 +4,7 @@ data "template_file" "cloud_init_alpaca" {
   template = file("${path.module}/files/cloud_init.yaml")
 
   vars = {
-    ssh_key    = var.SSH_KEY
+    ssh_key    = var.ssh_key
     hostname   = "alpaca-${count.index + 1}"
     domain     = "home.arpa"
     TS_AUTHKEY = var.TS_AUTHKEY
@@ -39,7 +39,7 @@ data "template_file" "cloud_init_llama" {
   template = file("${path.module}/files/cloud_init.yaml")
 
   vars = {
-    ssh_key    = var.SSH_KEY
+    ssh_key    = var.ssh_key
     hostname   = "llama-${count.index + 1}"
     domain     = "home.arpa"
     TS_AUTHKEY = var.TS_AUTHKEY

terraform/variables.tf

@@ -80,8 +80,8 @@ variable "TS_AUTHKEY" {
 }
 
 
-variable "SSH_KEY" {
+variable "ssh_key" {
   type        = string
-  description = "Private SSH key used to upload cloud-init files to Proxmox"
+  description = "Public SSH key used by cloud-init"
 }