# terraform.tfvars.example — generated by `autumn release init --target aws-ecs`
# Copy to terraform.tfvars and edit the non-secret values below.
# WARNING: Never commit real credentials — pass secrets as TF_VAR_* env vars
# or through your CI's secret store instead of writing them into this file.
app_name = "{{project_name}}"
region = "us-east-1"
vpc_cidr = "10.0.0.0/16"
# The hosted zone must already own domain_name's live DNS before `terraform
# apply` — find yours with:
# aws route53 list-hosted-zones-by-name --dns-name <your-domain> --query "HostedZones[0].Id" --output text
domain_name = "app.example.com"
route53_zone_id = "Z0000000000000000000"
image_tag = "latest"
cpu = "512"
memory = "1024"
db_instance_class = "db.t4g.micro"
# bootstrap_image = "public.ecr.aws/nginx/nginx:latest" # rarely needs to change — see variables.tf if you do
desired_count = 2
min_count = 1
max_count = 10
enable_redis_cache = false
# ── Secrets — set these out-of-band, never as literals in this file ────────
# There is no database_url variable to set: main.tf derives the connection
# string from the RDS instance this same apply creates.
#
# export TF_VAR_database_admin_password="$(openssl rand -hex 24)"
# export TF_VAR_signing_secret="$(openssl rand -hex 32)"
#
# database_admin_password = (set via TF_VAR_database_admin_password)
# signing_secret = (set via TF_VAR_signing_secret)