Nereus/terraform/infra/README.md

19 lines
671 B
Markdown

# Libvirt infrastructure
This stack creates a dedicated NAT network and two Fedora 44 x86_64 machines.
It stops at the machine boundary. Ansible remains responsible for Fedora and
k3s configuration.
Keep real values in an untracked `terraform.tfvars` file:
```bash
cp terraform.tfvars.example terraform.tfvars
terraform init
terraform apply
K3S_TOKEN="$(openssl rand -hex 32)" \
../../scripts/provision/bootstrap.sh inventory.yml
```
The generated `inventory.yml`, Terraform state, and variable file are ignored.
The SSH public key is safe to place in Terraform input; the matching private key
is referenced by absolute path and is never read into Terraform state.