# site-wan: a per-site simulated-ISP uplink network (D-100 / D-122). NAT'd /24,
# the site edge's WAN leg attaches here. Generalizes the virsh-created
# `office1-wan` (172.30.1.0/24) into a reusable module so every per-site ISP
# uplink is tofu-managed (D-122 / operator 2b, 2026-07-15).
#
# MTU is the ISP-uplink domain: 1500, NOT the jumbo 9000 the planes/mesh use.
# This is a hard distinction -- the simulated ISP link mirrors a real 1500-MTU
# internet uplink (see the two-MTU-domains note in the session ledger). Do not
# raise this to 9000.

variable "network_name" {
  description = "libvirt network name, e.g. \"vr1-dc0-wan\"."
  type        = string
}

variable "cidr" {
  description = <<-EOT
    The uplink /24, e.g. "172.30.2.0/24" (Edge role 172.30.0.0/16, D-115).
    The network gateway is the .1 host of this CIDR (cidrhost(cidr, 1)); the
    site edge's WAN interface takes a STATIC address on this segment (e.g. .2),
    configured on the edge itself via the REST API -- not by DHCP here (the
    edge WAN is static, exactly as office1-opnsense's WAN 172.30.1.2 is).
  EOT
  type        = string
}

variable "mtu" {
  description = "Uplink MTU. Default 1500 (the ISP-uplink domain; NEVER jumbo)."
  type        = number
  default     = 1500
}