cluster/azure.tf
Peter Kurfer c6590603dc
feat: get secrets from Azure KeyVault instead of using vars for
everything

update providers and migrate CloudFlare DNS major update
2025-03-27 17:15:59 +01:00

35 lines
1.2 KiB
HCL

data "azurerm_client_config" "current" {}
resource "azurerm_resource_group" "forgejo_runners" {
name = "Forgejo-Runners"
location = "West Europe"
}
resource "azurerm_key_vault" "forgejo_runners" {
name = "Forgejo-Runners"
location = azurerm_resource_group.forgejo_runners.location
resource_group_name = azurerm_resource_group.forgejo_runners.name
tenant_id = data.azurerm_client_config.current.tenant_id
soft_delete_retention_days = 30
purge_protection_enabled = false
enable_rbac_authorization = true
sku_name = "standard"
}
resource "azurerm_resource_group" "infrastructure" {
name = "Infrastructure"
location = "West Europe"
}
resource "azurerm_key_vault" "hetzner" {
name = "Hetzner"
location = azurerm_resource_group.infrastructure.location
resource_group_name = azurerm_resource_group.infrastructure.name
tenant_id = data.azurerm_client_config.current.tenant_id
soft_delete_retention_days = 30
purge_protection_enabled = false
enable_rbac_authorization = true
sku_name = "standard"
}