# Libvirt infrastructure

This stack creates a dedicated NAT network and two Fedora 44 x86_64 machines.
It stops at the machine boundary. Ansible remains responsible for Fedora and
k3s configuration.

Keep real values in an untracked `terraform.tfvars` file:

```bash
cp terraform.tfvars.example terraform.tfvars
terraform init
terraform apply
K3S_TOKEN="$(openssl rand -hex 32)" \
  ../../scripts/provision/bootstrap.sh inventory.yml
```

The generated `inventory.yml`, Terraform state, and variable file are ignored.
The SSH public key is safe to place in Terraform input; the matching private key
is referenced by absolute path and is never read into Terraform state.