variable "domain" {
  type = string
}
variable "domain_zone_id" {
  type = string
}
variable "cloudflare_api_token" {
  type = string
  sensitive = true
}

variable "pve_api_url"        { type = string }
variable "pve_token" {
  type = string
  sensitive = true
}

variable "node_name"          { type = string }   # e.g. "pve"
variable "datastore_id"       { type = string }   # e.g. "local-lvm"
variable "bridge"             { type = string }   # e.g. "vmbr0"

variable "template_vmid"      { type = number }   # VMID of your template
variable "vm_id"              { type = number }   # VMID to assign
variable "name"               { type = string }

variable "ssh_pubkey_path"    { type = string }   # e.g. "~/.ssh/id_ed25519.pub"

variable "admin_username" {
  type = string
  default = "azureuser"
}

variable "azure_location" {
  type = string
  default = "westeurope"
}

variable "azure_subscription_id" {
  type = string
}

variable "allowed_ssh_cidrs_ipv4" {
  type = list(string)
  description = "IPv4 CIDRs allowed to SSH (22/tcp). Empty list means allow from anywhere."
  default = []
}