Some checks failed
Code Quality & Security Scan / TFLint (push) Successful in 20s
Code Quality & Security Scan / Terraform Destroy (push) Has been skipped
Code Quality & Security Scan / Tfsec Security Scan (push) Successful in 25s
Code Quality & Security Scan / Checkov Security Scan (push) Successful in 35s
Code Quality & Security Scan / Terraform Validate (push) Successful in 33s
Code Quality & Security Scan / SonarQube Scan (push) Successful in 44s
Code Quality & Security Scan / Terraform Plan (push) Failing after 49s
Code Quality & Security Scan / Terraform Apply (push) Has been skipped
Added vault_skip_tls_verify variable to fix Terraform validation error. This variable is referenced in provider.tf but was not declared in variables.tf. Default value is false for security, can be set to true for self-signed certificates in development/testing environments.
142 lines
3.6 KiB
HCL
142 lines
3.6 KiB
HCL
# Renovate Configuration Variables
|
|
|
|
# Container Configuration
|
|
variable "container_name" {
|
|
description = "Name of the Renovate container"
|
|
type = string
|
|
default = "renovate"
|
|
}
|
|
|
|
variable "renovate_image" {
|
|
description = "Docker image for Renovate"
|
|
type = string
|
|
default = "renovate/renovate:latest"
|
|
}
|
|
|
|
variable "restart_policy" {
|
|
description = "Restart policy for the container (no, on-failure, always, unless-stopped)"
|
|
type = string
|
|
default = "unless-stopped"
|
|
}
|
|
|
|
# Resource Limits
|
|
variable "memory_limit" {
|
|
description = "Memory limit for the container in MB (e.g., 2048 for 2GB)"
|
|
type = number
|
|
default = 2048
|
|
}
|
|
|
|
variable "memory_swap_limit" {
|
|
description = "Memory swap limit for the container in MB (-1 for unlimited)"
|
|
type = number
|
|
default = -1
|
|
}
|
|
|
|
# Networking
|
|
variable "domain" {
|
|
description = "Domain name for the application"
|
|
type = string
|
|
default = "bsdserver.lan"
|
|
}
|
|
|
|
variable "dns_name" {
|
|
description = "DNS name for the Renovate service (defaults to container_name if not specified)"
|
|
type = string
|
|
default = null
|
|
}
|
|
|
|
variable "create_cname_record" {
|
|
description = "Whether to create a DNS CNAME record"
|
|
type = bool
|
|
default = false
|
|
}
|
|
|
|
# Renovate Platform Configuration
|
|
variable "renovate_platform" {
|
|
description = "Git platform to use (gitea, github, gitlab, etc.)"
|
|
type = string
|
|
default = "gitea"
|
|
}
|
|
|
|
variable "renovate_endpoint" {
|
|
description = "API endpoint for the git platform (e.g., https://gitea.example.com/api/v1/)"
|
|
type = string
|
|
}
|
|
|
|
variable "renovate_token" {
|
|
description = "Personal access token for Renovate bot authentication"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "renovate_git_author" {
|
|
description = "Git author for Renovate commits (e.g., 'Renovate Bot <renovate-bot@example.com>')"
|
|
type = string
|
|
default = "Renovate Bot <renovate-bot@example.com>"
|
|
}
|
|
|
|
variable "renovate_username" {
|
|
description = "Username of the Renovate bot account"
|
|
type = string
|
|
default = "renovate-bot"
|
|
}
|
|
|
|
variable "renovate_autodiscover" {
|
|
description = "Enable autodiscovery of repositories"
|
|
type = bool
|
|
default = true
|
|
}
|
|
|
|
variable "renovate_onboarding_config" {
|
|
description = "Onboarding configuration for Renovate (JSON string)"
|
|
type = string
|
|
default = "{\"$schema\":\"https://docs.renovatebot.com/renovate-schema.json\",\"extends\":[\"config:recommended\"]}"
|
|
}
|
|
|
|
# Optional GitHub.com token for fetching changelogs
|
|
variable "github_com_token" {
|
|
description = "GitHub.com token for fetching changelogs (optional)"
|
|
type = string
|
|
default = ""
|
|
sensitive = true
|
|
}
|
|
|
|
# Logging
|
|
variable "log_level" {
|
|
description = "Log level for Renovate (debug, info, warn, error)"
|
|
type = string
|
|
default = "info"
|
|
}
|
|
|
|
variable "extra_env_vars" {
|
|
description = "Additional environment variables for the container"
|
|
type = list(string)
|
|
default = []
|
|
}
|
|
|
|
# Config File Management
|
|
variable "upload_config_file" {
|
|
description = "Whether to upload a config.js file to the container"
|
|
type = bool
|
|
default = true
|
|
}
|
|
|
|
# Vault Authentication
|
|
variable "role_id" {
|
|
description = "Role ID for Vault AppRole authentication"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "secret_id" {
|
|
description = "Secret ID for Vault AppRole authentication"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "vault_skip_tls_verify" {
|
|
description = "Skip TLS verification for Vault (useful for self-signed certificates)"
|
|
type = bool
|
|
default = false
|
|
}
|