Patrick de Ruiter bb54c5bf5b
Some checks failed
Code Quality & Security Scan / TFLint (push) Successful in 18s
Code Quality & Security Scan / Terraform Destroy (push) Has been skipped
Code Quality & Security Scan / Tfsec Security Scan (push) Successful in 23s
Code Quality & Security Scan / Checkov Security Scan (push) Successful in 32s
Code Quality & Security Scan / SonarQube Scan (push) Has been cancelled
Code Quality & Security Scan / Terraform Plan (push) Has been cancelled
Code Quality & Security Scan / Terraform Apply (push) Has been cancelled
Code Quality & Security Scan / Terraform Validate (push) Has started running
fix: Set vault_skip_tls_verify default to true
Changed vault_skip_tls_verify default from false to true to accommodate
self-signed certificates in the infrastructure.
2025-11-18 03:54:51 +01:00

142 lines
3.6 KiB
HCL

# Renovate Configuration Variables
# Container Configuration
variable "container_name" {
description = "Name of the Renovate container"
type = string
default = "renovate"
}
variable "renovate_image" {
description = "Docker image for Renovate"
type = string
default = "renovate/renovate:latest"
}
variable "restart_policy" {
description = "Restart policy for the container (no, on-failure, always, unless-stopped)"
type = string
default = "unless-stopped"
}
# Resource Limits
variable "memory_limit" {
description = "Memory limit for the container in MB (e.g., 2048 for 2GB)"
type = number
default = 2048
}
variable "memory_swap_limit" {
description = "Memory swap limit for the container in MB (-1 for unlimited)"
type = number
default = -1
}
# Networking
variable "domain" {
description = "Domain name for the application"
type = string
default = "bsdserver.lan"
}
variable "dns_name" {
description = "DNS name for the Renovate service (defaults to container_name if not specified)"
type = string
default = null
}
variable "create_cname_record" {
description = "Whether to create a DNS CNAME record"
type = bool
default = false
}
# Renovate Platform Configuration
variable "renovate_platform" {
description = "Git platform to use (gitea, github, gitlab, etc.)"
type = string
default = "gitea"
}
variable "renovate_endpoint" {
description = "API endpoint for the git platform (e.g., https://gitea.example.com/api/v1/)"
type = string
}
variable "renovate_token" {
description = "Personal access token for Renovate bot authentication"
type = string
sensitive = true
}
variable "renovate_git_author" {
description = "Git author for Renovate commits (e.g., 'Renovate Bot <renovate-bot@example.com>')"
type = string
default = "Renovate Bot <renovate-bot@example.com>"
}
variable "renovate_username" {
description = "Username of the Renovate bot account"
type = string
default = "renovate-bot"
}
variable "renovate_autodiscover" {
description = "Enable autodiscovery of repositories"
type = bool
default = true
}
variable "renovate_onboarding_config" {
description = "Onboarding configuration for Renovate (JSON string)"
type = string
default = "{\"$schema\":\"https://docs.renovatebot.com/renovate-schema.json\",\"extends\":[\"config:recommended\"]}"
}
# Optional GitHub.com token for fetching changelogs
variable "github_com_token" {
description = "GitHub.com token for fetching changelogs (optional)"
type = string
default = ""
sensitive = true
}
# Logging
variable "log_level" {
description = "Log level for Renovate (debug, info, warn, error)"
type = string
default = "info"
}
variable "extra_env_vars" {
description = "Additional environment variables for the container"
type = list(string)
default = []
}
# Config File Management
variable "upload_config_file" {
description = "Whether to upload a config.js file to the container"
type = bool
default = true
}
# Vault Authentication
variable "role_id" {
description = "Role ID for Vault AppRole authentication"
type = string
sensitive = true
}
variable "secret_id" {
description = "Secret ID for Vault AppRole authentication"
type = string
sensitive = true
}
variable "vault_skip_tls_verify" {
description = "Skip TLS verification for Vault (useful for self-signed certificates)"
type = bool
default = true
}