unkinben
fd82876f5f
Add a data-driven 'user' config kind so Gitea accounts are declared as config/git.unkin.net/user/<name>.yaml, mirroring the existing repository and team kinds. Wire the yaml into a new modules/user submodule that creates a gitea_user (provider go-gitea/gitea 0.7.0, already pinned). The provider's user resource requires a password; generate a per-user random_password so nothing sensitive is hardcoded and only a placeholder lives in state (tokens come later from vault-plugin-secrets-gitea). Provision teabot's implementer and reviewer personality accounts with a conservative posture: not site admins, no org creation, no repo creation, limited profile visibility. Claude-Session: https://claude.ai/code/session_015ur3i7D2azsMAWTSVABApv
26 lines
522 B
HCL
26 lines
522 B
HCL
include "root" {
|
|
path = find_in_parent_folders("root.hcl")
|
|
expose = true
|
|
}
|
|
|
|
include "config" {
|
|
path = "${get_repo_root()}/config/config.hcl"
|
|
expose = true
|
|
}
|
|
|
|
locals {
|
|
config = include.config.locals.config
|
|
}
|
|
|
|
terraform {
|
|
source = "../../../modules/gitea_instance"
|
|
}
|
|
|
|
inputs = {
|
|
organisation = local.config.organisation
|
|
repository = local.config.repository
|
|
branch_protection = local.config.branch_protection
|
|
team = local.config.team
|
|
user = local.config.user
|
|
}
|