# Inner-root inputs, mirroring vr1-dc0-substrate/variables.tf (the pattern of
# record -- its per-variable comments carry the measured traps and apply here
# unchanged). The two connection values (transit IP + ssh user) are MEASURED
# after vvr1-dc1 boots (hard rule 2 -- not invented); the rest mirror the outer
# root.

variable "vvr1_dc1_transit_ip" {
  description = "vvr1-dc1's static transit IP (D-124 Scheme A, NetBox-assigned via the amendment's apex commit) -- where this root's qemu+ssh inner provider connects. MEASURED after the outer apply boots vvr1-dc1."
  type        = string
}

variable "vvr1_dc1_ssh_user" {
  description = "SSH user on vvr1-dc1 for the qemu+ssh inner provider (the cloud-init user, e.g. jessea123). Key auth + known_hosts verified out of band (NO no_verify; ALL key types in known_hosts -- dc0's measured trap)."
  type        = string
  default     = "jessea123"
}

variable "vvr1_dc1_ssh_keyfile" {
  description = "PATH (on the EXECUTING host, i.e. voffice1 per D-128) to the DEDICATED dc1 private key for the qemu+ssh provider (D-126 option a; ~/vr1-dc1-creds/vr1-dc1_svc_ed25519). A path, never key material. REQUIRED: the provider's ssh dial reads NEITHER ~/.ssh/config nor default identities (dc0, measured 2026-07-20)."
  type        = string
}

variable "inner_pool_path" {
  description = "Directory path INSIDE vvr1-dc1 for the inner libvirt storage pool that backs the node/edge disks (created by the bootstrap step)."
  type        = string
  default     = "/var/lib/libvirt/vr1-dc1-inner"
}

variable "opnsense_base_path" {
  description = "Path ON THE EXECUTING HOST (voffice1, D-128 Plane 2) to the prepped OPNsense nano qcow2 -- the remote qemu+ssh provider UPLOADS volume content from ITS OWN filesystem (dc0, measured 2026-07-20). 26.7 nano: the DC-edge base PROVEN end to end on dc0 (boot, D-112(c) console bootstrap, D-113(a2) API, egress)."
  type        = string
  default     = "/var/lib/libvirt/vr1-dc1-inner/opnsense-26.7-nano.qcow2"
}

variable "domain_suffix" {
  description = "DNS domain suffix for the planes (mirrors the outer root)."
  type        = string
}

variable "underlay_mtu" {
  description = "Jumbo MTU for the internal fabric planes/mesh (9000). The wan bridge stays 1500."
  type        = number
}

variable "vr1_dc1_planes" {
  description = "The six vr1-dc1 planes (CIDR map), copied from the outer root's var of the same name (the committed values-of-record; D-124 amendment 2026-07-21, apex-verified). dc-planes creates them as isolated-L2 networks inside vvr1-dc1."
  type        = any
}