# terraform.tfvars.example — generated by `autumn release init --target gcp-cloud-run`
# Copy to terraform.tfvars and edit the non-secret values below.
# WARNING: Never commit real credentials — pass secrets as TF_VAR_* env vars
# or through your CI's secret store instead of writing them into this file.
app_name = "{{project_name}}"
region = "us-central1"
# project_id has no default — find yours:
# gcloud config get-value project
project_id = "your-gcp-project-id"
image_tag = "latest"
db_tier = "db-f1-micro"
vpc_connector_cidr = "10.8.0.0/28"
# bootstrap_image = "us-docker.pkg.dev/cloudrun/container/hello" # rarely needs to change
min_instances = 1
max_instances = 10
enable_redis_cache = false
# ── Secrets — set these out-of-band, never as literals in this file ────────
# There is no database_url variable to set: main.tf derives the connection
# string from the Cloud SQL instance this same apply creates.
#
# export TF_VAR_database_admin_password="$(openssl rand -hex 24)"
# export TF_VAR_signing_secret="$(openssl rand -hex 32)"
#
# database_admin_password = (set via TF_VAR_database_admin_password)
# signing_secret = (set via TF_VAR_signing_secret)