terraform {
  backend "s3" {
    # Backend configuration should be provided via:
    # 1. Command-line flags during terraform init
    # 2. Environment variables (AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY)
    # 3. Backend config file
    #
    # Example init command:
    #   terraform init \
    #     -backend-config="endpoints={s3=\"https://minio.example.com:443\"}" \
    #     -backend-config="bucket=terraform-state" \
    #     -backend-config="key=docker/renovate/terraform.tfstate" \
    #     -backend-config="region=main" \
    #     -backend-config="skip_credentials_validation=true" \
    #     -backend-config="skip_metadata_api_check=true" \
    #     -backend-config="skip_requesting_account_id=true" \
    #     -backend-config="skip_region_validation=true" \
    #     -backend-config="use_path_style=true"
    #
    # Or use environment variables:
    #   export AWS_ACCESS_KEY_ID="your-access-key"
    #   export AWS_SECRET_ACCESS_KEY="your-secret-key"
  }
}