From c61c4b7662601039623a15f0ce553826fa3bc957 Mon Sep 17 00:00:00 2001
From: alessandrovitali <mail@alessandrovitali.net>
Date: Tue, 18 Aug 2026 13:15:54 +0200
Subject: [PATCH] feat: commit terraform vars sans sensitive values

---
 .gitignore                 |  5 +++--
 terraform/.env.example     |  4 ++++
 terraform/terraform.tfvars | 11 +++++++++++
 3 files changed, 18 insertions(+), 2 deletions(-)
 create mode 100644 terraform/.env.example
 create mode 100644 terraform/terraform.tfvars

diff --git a/.gitignore b/.gitignore
index 36d0546..807de7f 100644
--- a/.gitignore
+++ b/.gitignore
@@ -2,10 +2,11 @@
 .terraform/
 *.tfstate
 *.tfstate.backup
-*.tfvars
-*.tfvars.json
 .terraform.lock.hcl
 
+# Secrets
+.env
+
 # Ansible
 ansible/inventory.ini
 
diff --git a/terraform/.env.example b/terraform/.env.example
new file mode 100644
index 0000000..901c1bf
--- /dev/null
+++ b/terraform/.env.example
@@ -0,0 +1,4 @@
+# Copy this to `.env` and fill in real values
+TF_VAR_domain_name=domain.tld
+TF_VAR_hcloud_token=abc123
+TF_VAR_cloudflare_api_token=abc123
diff --git a/terraform/terraform.tfvars b/terraform/terraform.tfvars
new file mode 100644
index 0000000..5c81a5d
--- /dev/null
+++ b/terraform/terraform.tfvars
@@ -0,0 +1,11 @@
+project_name = "dokploy"
+
+hcloud_server_type  = "cx23"
+hcloud_image        = "debian-13"
+hcloud_location     = "nbg1"
+
+record_name          = "dokploy"
+cloudflare_proxied   = true
+
+# Note: Use file() to easily read your local SSH public key
+ssh_public_key = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILidEpbcANpqqK0K5pe4gkqSr0R+1qAo8QWTXtojGQxB"