feat: enable access to vault certificate

- puppet now automatically trusts vault certs for some clients
- ensure build job can access vault certs

.gitea/workflows/build.yaml

@@ -9,7 +9,7 @@ jobs:
     runs-on: almalinux-8
     container:
       image: git.unkin.net/unkin/almalinux9-actionsdind:latest
-      options: --privileged
+      options: "--privileged --volume /etc/pki/tls/vault:/etc/pki/tls/vault:ro"
 
     steps:
       - name: Checkout code
@@ -29,4 +29,5 @@ jobs:
         env:
           VAULT_ROLEID: ${{ secrets.TERRAFORM_INCUS_VAULT_ROLEID }}
         run: |
+          ls -lh /etc/pki/tls/vault
           make plan

Makefile

@@ -15,16 +15,14 @@ define vault_env
 	export TG_TF_PATH=terraform && \
 	eval "$$(vault read -format=json kv/data/service/terraform/incus \
 	  | jq -r '.data.data | to_entries[] | "export \(.key)=\(.value|@sh)"')" && \
-	export INCUS_INSECURE_TLS=1 && \
+	export INCUS_CONFIG_DIR=$$(mktemp -d) && \
-	export INCUS_GLOBAL_CONF=$$(mktemp -d) && \
+	trap "rm -rf $$INCUS_CONFIG_DIR" EXIT && \
-	export INCUS_CONF=$$INCUS_GLOBAL_CONF && \
+	mkdir -p $$INCUS_CONFIG_DIR && \
-	trap "rm -rf $$INCUS_GLOBAL_CONF" EXIT && \
+	mkdir -p $$INCUS_CONFIG_DIR/servercerts && \
-	mkdir -p $$INCUS_GLOBAL_CONF && \
+	printf '%s\n' "$$INCUS_CONF_INCUSIMAGES_CERT" > $$INCUS_CONFIG_DIR/servercerts/incus-images.crt && \
-	mkdir -p $$INCUS_GLOBAL_CONF/servercerts && \
+	printf '%s\n' "$$INCUS_CONF_CONFIG_YAML" > $$INCUS_CONFIG_DIR/config.yaml && \
-	printf '%s\n' "$$INCUS_CONF_INCUSIMAGES_CERT" > $$INCUS_GLOBAL_CONF/servercerts/incus-images.crt && \
+	printf '%s\n' "$$INCUS_CLIENT_CRT" > $$INCUS_CONFIG_DIR/client.crt && \
-	printf '%s\n' "$$INCUS_CONF_CONFIG_YAML" > $$INCUS_GLOBAL_CONF/config.yaml && \
+	printf '%s\n' "$$INCUS_CLIENT_KEY" > $$INCUS_CONFIG_DIR/client.key
-	printf '%s\n' "$$INCUS_CLIENT_CRT" > $$INCUS_GLOBAL_CONF/client.crt && \
-	printf '%s\n' "$$INCUS_CLIENT_KEY" > $$INCUS_GLOBAL_CONF/client.key
 endef
 
 clean:

config/instances/ausyd1nxvm2000/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2001/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2002/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2003/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2004/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2005/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2006/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2007/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2008/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2009/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2010/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2011/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2012/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2013/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2014/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2015/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2016/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2017/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2018/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2019/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2020/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2021/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2022/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2023/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2024/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2025/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2026/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2027/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2028/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2029/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2030/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2031/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2032/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2033/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2034/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2035/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2036/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2037/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2038/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2039/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2040/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2041/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2042/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2043/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2044/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2045/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2046/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2047/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2048/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2049/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2050/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2051/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2052/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2053/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2054/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2055/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2056/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2057/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2058/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2059/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2060/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2061/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2062/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2063/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2064/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2065/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2066/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2067/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2068/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2069/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2070/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2071/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2072/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2073/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2074/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2075/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2076/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2077/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2078/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2079/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2080/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2081/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2082/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2083/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2084/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2085/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2086/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2087/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2088/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2089/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2090/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2091/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2092/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2093/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2094/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2095/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2096/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"

config/instances/ausyd1nxvm2097/terragrunt.hcl

@@ -35,6 +35,7 @@ generate "incus" {
     provider "incus" {
       generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"