# Copy to terraform.tfvars (or a git-ignored *.auto.tfvars) and adjust.
# Keep secrets - psk here - out of any tracked file: set them with
# TF_VAR_psk or in a git-ignored *.auto.tfvars instead.

location              = "westeurope"
name                  = "vpn-router-example"
admin_ssh_public_key  = "ssh-ed25519 AAAA... you@example.com"

local_fqdn   = "router.example.com"
local_cidrs  = "10.0.3.0/24"

remote_addrs  = "peer.example.net"
remote_id     = "peer.example.net"
remote_cidrs  = "192.168.0.0/24"

p2s_enabled       = false
wireguard_enabled = false
deploy_workload_vm = false