✨ Enhance module documentation with detailed descriptions for DNS, Foundry, Pangolin, and Public IP modules

modules/dns/main.tf

@@ -1,3 +1,11 @@
+/**
+ * # DNS Module
+ *
+ * Manages Cloudflare DNS records for the root domain:
+ * - A / AAAA records for the apex and wildcard pointing at the Pangolin proxy.
+ * - CDN-proxied A / AAAA records for selected subdomains.
+ */
+
 terraform {
   required_providers {
     cloudflare = {

modules/dns/variables.tf

@@ -1,16 +1,20 @@
 variable "domain_zone_id" {
+  description = "Cloudflare Zone ID for the target domain."
   type        = string
 }
 
 variable "domain_name" {
+  description = "Root domain name (e.g. 'example.com')."
   type        = string
 }
 
 variable "pangolin-proxy-v4" {
+  description = "IPv4 address of the Pangolin reverse-proxy."
   type        = string
 }
 
 variable "pangolin-proxy-v6" {
+  description = "IPv6 address of the Pangolin reverse-proxy."
   type        = string
 }
 

modules/foundry/main.tf

@@ -1,3 +1,10 @@
+/**
+ * # Foundry Module
+ *
+ * Creates a Proxmox LXC container running Foundry Virtual Tabletop.
+ * Supports configurable resources, networking, and static or DHCP addressing.
+ */
+
 terraform {
   required_providers {
     proxmox = {

modules/pangolin/main.tf

@@ -1,3 +1,10 @@
+/**
+ * # Pangolin Module
+ *
+ * Deploys an Azure Linux VM with dual-stack (IPv4 + IPv6) networking,
+ * intended as a reverse-proxy and WireGuard gateway for the homelab.
+ */
+
 terraform {
   required_providers {
      azurerm = {

modules/pangolin/outputs.tf

@@ -1,11 +1,14 @@
 output "public_ipv4" {
+  description = "The static public IPv4 address of the Pangolin proxy."
   value       = azurerm_public_ip.pip_v4.ip_address
 }
 
 output "public_ipv6" {
+  description = "The static public IPv6 address of the Pangolin proxy."
   value       = azurerm_public_ip.pip_v6.ip_address
 }
 
 output "ssh_ipv4" {
+  description = "Ready-to-use SSH command for connecting to the VM over IPv4."
   value       = "ssh ${var.admin_username}@${azurerm_public_ip.pip_v4.ip_address}"
 }

modules/pangolin/variables.tf

@@ -1,19 +1,23 @@
 variable "location" {
+  description = "Azure region for all resources in this module."
   type        = string
   default     = "westeurope"
 }
 
 variable "environment" {
+  description = "Deployment environment label (e.g. 'prod', 'staging')."
   type        = string
   default     = "prod"
 }
 
 variable "instance" {
+  description = "Instance identifier appended to resource names."
   type        = string
   default     = "homelab"
 }
 
 variable "tags" {
+  description = "Tags applied to all Azure resources in this module."
   type        = map(string)
   default = {
     project = "pangolin"
@@ -22,47 +26,54 @@ variable "tags" {
 }
 
 variable "vm_name" {
+  description = "Name of the Azure Linux VM."
   type        = string
   default     = "pangolin-proxy"
 }
 
 variable "vm_size" {
+  description = "Azure VM size/SKU."
   type        = string
   default     = "Standard_A2_v2"
 }
 
 variable "admin_username" {
+  description = "Admin SSH username for the VM."
   type        = string
   default     = "azureuser"
 }
 
 variable "ssh_pubkey" {
+  description = "SSH public key content for the admin user."
   type        = string
 }
 
 variable "vnet_cidr_ipv4" {
+  description = "IPv4 address space for the virtual network."
   type        = string
   default     = "10.50.0.0/16"
 }
 
 variable "vnet_cidr_ipv6" {
+  description = "IPv6 address space for the virtual network."
   type        = string
   default     = "fd7d:bb99:1da4::/48"
 }
 
 variable "subnet_cidr_ipv4" {
+  description = "IPv4 CIDR for the VM subnet."
   type        = string
   default     = "10.50.1.0/24"
 }
 
-
 variable "subnet_cidr_ipv6" {
+  description = "IPv6 CIDR for the VM subnet."
   type        = string
   default     = "fd7d:bb99:1da4:195::/64"
 }
 
 variable "allowed_ssh_cidrs_ipv4" {
-  type = list(string)
   description = "IPv4 CIDRs allowed to SSH (22/tcp). Empty list means allow from anywhere."
+  type        = list(string)
   default     = []
 }

modules/pip/main.tf

@@ -1,3 +1,10 @@
+/**
+ * # Public IP Module
+ *
+ * Discovers the caller's public IPv4 address using an external echo-IP service.
+ * Used to dynamically allowlist the deployer's IP in firewall rules.
+ */
+
 terraform {
   required_providers {
      http = { }