# INNER root for D-123 MODEL B (2026-07-16). The vr1-dc0 substrate -- 6 dc-planes,
# the site-wan uplink, the OPNsense edge, an inner storage pool, and the 9 node VMs
# -- created INSIDE vvr1-dc0 via the qemu+ssh inner provider (R-5), NOT on vcloud.
# This is a SEPARATE root + state from opentofu/ (the outer root) because a libvirt
# provider cannot be configured from a resource created in the same apply: vvr1-dc0
# must exist, be booted, and have libvirtd reachable before this root can plan. Apply
# order: outer (opentofu/) boots vvr1-dc0 -> bootstrap gate (site-headend-install.sh
# installs nested libvirtd/pool/kvm-nested/base-image) -> THIS root. The modules are
# reused VERBATIM from ../modules/ so the whole shim collapses to a single root at
# Roosevelt. Provider pin matches the outer root's versions.tf (0.9.8, confirmed).
terraform {
  required_version = ">= 1.6.0"

  required_providers {
    libvirt = {
      source  = "dmacvicar/libvirt"
      version = "0.9.8"
    }
  }
}