Nereus/terraform/infra/README.md

Libvirt infrastructure

This stack creates a dedicated NAT network and two Fedora 44 x86_64 machines. It stops at the machine boundary. Ansible remains responsible for Fedora and k3s configuration.

Keep real values in an untracked terraform.tfvars file:

cp terraform.tfvars.example terraform.tfvars
terraform init
terraform apply
K3S_TOKEN="$(openssl rand -hex 32)" \
  ../../scripts/provision/bootstrap.sh inventory.yml

The generated inventory.yml, Terraform state, and variable file are ignored. The SSH public key is safe to place in Terraform input; the matching private key is referenced by absolute path and is never read into Terraform state.