Merge pull request 'feat: add externaldns hosts' (#37) from benvin/externaldns into master

Reviewed-on: #37

.gitea/workflows/build.yaml

@@ -0,0 +1,32 @@
+---
+name: Build
+
+on:
+  pull_request:
+
+jobs:
+  build:
+    runs-on: almalinux-8
+    container:
+      image: git.unkin.net/unkin/almalinux9-actionsdind:latest
+      options: "--privileged --volume /etc/pki/tls/vault:/etc/pki/tls/vault:ro"
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+
+      - name: Fetch master branch
+        run: |
+          git fetch origin master:master
+
+      - name: Show changed files
+        run: |
+          git diff --name-only master
+
+      - name: Run Terraform Plan
+        env:
+          VAULT_ROLEID: ${{ secrets.TERRAFORM_INCUS_VAULT_ROLEID }}
+        run: |
+          make plan

.gitea/workflows/deploy.yaml

@@ -0,0 +1,26 @@
+---
+name: Deploy
+
+on:
+  push:
+    branches:
+      - master
+
+jobs:
+  deploy:
+    runs-on: almalinux-8
+    container:
+      image: git.unkin.net/unkin/almalinux9-actionsdind:latest
+      options: "--privileged --volume /etc/pki/tls/vault:/etc/pki/tls/vault:ro"
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+
+      - name: Run Terraform Apply
+        env:
+          VAULT_ROLEID: ${{ secrets.TERRAFORM_INCUS_VAULT_ROLEID }}
+        run: |
+          make apply

Makefile

@@ -10,8 +10,27 @@ define vault_env
 	export PUPPET_CERT_CA=$$(vault kv get -field=public_key kv/service/puppet/certificates/ca) && \
 	export PUPPET_CERT_PUB=$$(vault kv get -field=public_key kv/service/puppet/certificates/terraform) && \
 	export PUPPET_CERT_PRIV=$$(vault kv get -field=private_key kv/service/puppet/certificates/terraform) && \
-	export TERRAGRUNT_EXCLUDE_DIR="templates/base" \
+	export TG_QUEUE_EXCLUDE_DIR="templates/base" && \
-	export $$(vault read -format=json kv/data/service/terraform/incus | jq -r '.data.data | to_entries[] | "\(.key)=\(.value)"')
+	export TG_PROVIDER_CACHE=1 && \
+	export TG_TF_PATH=terraform && \
+	eval "$$(vault read -format=json kv/data/service/terraform/incus \
+	  | jq -r '.data.data | to_entries[] | "export \(.key)=\(.value|@sh)"')" && \
+	export INCUS_CONFIG_DIR=$$(mktemp -d) && \
+	trap "rm -rf $$INCUS_CONFIG_DIR" EXIT && \
+	mkdir -p $$INCUS_CONFIG_DIR && \
+	mkdir -p $$INCUS_CONFIG_DIR/servercerts && \
+	printf '%s\n' "$$INCUS_CONF_INCUSIMAGES_CERT" > $$INCUS_CONFIG_DIR/servercerts/incus-images.crt && \
+	printf '%s\n' "$$INCUS_CONF_CONFIG_YAML" > $$INCUS_CONFIG_DIR/config.yml && \
+	if [ -f /etc/pki/tls/vault/certificate.crt ] && [ -f /etc/pki/tls/vault/private.key ]; then \
+		cp /etc/pki/tls/vault/certificate.crt $$INCUS_CONFIG_DIR/client.crt && \
+		cp /etc/pki/tls/vault/private.key $$INCUS_CONFIG_DIR/client.key; \
+	elif [ -f $$HOME/.config/incus/client.crt ] && [ -f $$HOME/.config/incus/client.key ]; then \
+		cp $$HOME/.config/incus/client.crt $$INCUS_CONFIG_DIR/client.crt && \
+		cp $$HOME/.config/incus/client.key $$INCUS_CONFIG_DIR/client.key; \
+	else \
+		printf '%s\n' "$$INCUS_CLIENT_CRT" > $$INCUS_CONFIG_DIR/client.crt && \
+		printf '%s\n' "$$INCUS_CLIENT_KEY" > $$INCUS_CONFIG_DIR/client.key; \
+	fi
 endef
 
 clean:
@@ -23,20 +42,20 @@ clean:
 
 init:
 	@$(call vault_env) && \
-	terragrunt run-all --terragrunt-non-interactive init --upgrade
+	terragrunt run --all --non-interactive init -- -upgrade
 
 plan: init
 	@$(call vault_env) && \
-	terragrunt run-all --terragrunt-parallelism 8 --terragrunt-non-interactive plan
+	terragrunt run --all --parallelism 4 --non-interactive plan
 
-apply:
+apply: init
 	@$(call vault_env) && \
-	terragrunt run-all --terragrunt-parallelism 5 --terragrunt-non-interactive apply
+	terragrunt run --all --parallelism 2 --non-interactive apply
 
 output:
 	@$(call vault_env) && \
 	rm -f tf_outputs.json && \
-	terragrunt run-all --terragrunt-parallelism 10 --terragrunt-non-interactive output -json >> tf_outputs.json
+	terragrunt run --all --parallelism 10 --non-interactive output -json >> tf_outputs.json
 
 hiera:
 	@echo "Setting up virtual environment with uv..."

config/globals/profiles.yaml

@@ -1,4 +1,3 @@
-# special devices
 gpu:
   description: "Pass-through Intel GPU"
   project: null
@@ -160,6 +159,16 @@ shared_apps_jellyfin:
       properties:
         source: /shared/apps/jellyfin
         path: /shared/apps/jellyfin
+shared_apps_maildata:
+  description: "Mount /shared/apps/maildata directly into the container"
+  project: null
+  config: {}
+  devices:
+    - type: disk
+      name: maildata-shared
+      properties:
+        source: /shared/apps/maildata
+        path: /shared/apps/maildata
 
 # storage
 disk10:
@@ -296,6 +305,16 @@ net_dmz1_eth1:
     limits.memory.enforce: hard
     limits.memory.swap: false
   devices: []
+2core3072:
+  description: "2 cores, 3GB RAM"
+  project: null
+  config:
+    boot.autostart: true
+    limits.cpu: 2
+    limits.memory: 3072MB
+    limits.memory.enforce: hard
+    limits.memory.swap: false
+  devices: []
 2core4096:
   description: "2 cores, 4GB RAM"
   project: null
@@ -306,6 +325,16 @@ net_dmz1_eth1:
     limits.memory.enforce: hard
     limits.memory.swap: false
   devices: []
+2core6144:
+  description: "2 cores, 6GB RAM"
+  project: null
+  config:
+    boot.autostart: true
+    limits.cpu: 2
+    limits.memory: 6144MB
+    limits.memory.enforce: hard
+    limits.memory.swap: false
+  devices: []
 4core4096:
   description: "4 cores, 4GB RAM"
   project: null
@@ -316,6 +345,16 @@ net_dmz1_eth1:
     limits.memory.enforce: hard
     limits.memory.swap: false
   devices: []
+4core6144:
+  description: "4 cores, 6GB RAM"
+  project: null
+  config:
+    boot.autostart: true
+    limits.cpu: 4
+    limits.memory: 6144MB
+    limits.memory.enforce: hard
+    limits.memory.swap: false
+  devices: []
 4core8192:
   description: "4 cores, 8GB RAM"
   project: null

config/instances/ausyd1nxvm2000/config.yaml

@@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core2048
+  - 2core4096
 disk_devices:
   - name: hashicorp-vault
     type: disk

config/instances/ausyd1nxvm2000/terragrunt.hcl

@@ -27,21 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-  #before_hook "load_node_Venv" {
-  #  commands = ["apply", "plan", "destroy", "init"]
-  #  execute  = ["bash", "-c", "../../../../../../ci/set_node_env.sh"]
-  #}
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -54,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2001/config.yaml

@@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core2048
+  - 2core4096
 disk_devices:
   - name: hashicorp-vault
     type: disk

config/instances/ausyd1nxvm2001/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2002/config.yaml

@@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core2048
+  - 2core4096
 disk_devices:
   - name: hashicorp-vault
     type: disk

config/instances/ausyd1nxvm2002/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2003/config.yaml

@@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core2048
+  - 2core4096
 disk_devices:
   - name: hashicorp-vault
     type: disk

config/instances/ausyd1nxvm2003/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2004/config.yaml

@@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core2048
+  - 2core4096
 disk_devices:
   - name: hashicorp-vault
     type: disk

config/instances/ausyd1nxvm2004/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2005/config.yaml

@@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core2048
+  - 2core4096
 storage_volumes:
   consul:
     pool: fastpool

config/instances/ausyd1nxvm2005/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2006/config.yaml

@@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core2048
+  - 2core4096
 storage_volumes:
   consul:
     pool: fastpool

config/instances/ausyd1nxvm2006/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2007/config.yaml

@@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core2048
+  - 2core4096
 storage_volumes:
   consul:
     pool: fastpool

config/instances/ausyd1nxvm2007/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2008/config.yaml

@@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core2048
+  - 2core4096
 storage_volumes:
   consul:
     pool: fastpool

config/instances/ausyd1nxvm2008/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2009/config.yaml

@@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core2048
+  - 2core4096
 storage_volumes:
   consul:
     pool: fastpool

config/instances/ausyd1nxvm2009/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2010/config.yaml

@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core2048
+  - 2core4096

config/instances/ausyd1nxvm2010/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2011/config.yaml

@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core2048
+  - 2core4096

config/instances/ausyd1nxvm2011/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2012/config.yaml

@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core2048
+  - 2core4096

config/instances/ausyd1nxvm2012/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2013/config.yaml

@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core2048
+  - 2core3072

config/instances/ausyd1nxvm2013/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2014/config.yaml

@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core2048
+  - 2core3072

config/instances/ausyd1nxvm2014/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2015/config.yaml

@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core2048
+  - 2core4096

config/instances/ausyd1nxvm2015/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2016/config.yaml

@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core2048
+  - 2core4096

config/instances/ausyd1nxvm2016/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2017/config.yaml

@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core2048
+  - 2core4096

config/instances/ausyd1nxvm2017/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2018/config.yaml

@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core2048
+  - 2core4096

config/instances/ausyd1nxvm2018/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2019/config.yaml

@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core2048
+  - 2core4096

config/instances/ausyd1nxvm2019/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2020/config.yaml

@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core2048
+  - 2core3072

config/instances/ausyd1nxvm2020/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2021/config.yaml

@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core2048
+  - 2core4096

config/instances/ausyd1nxvm2021/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2022/config.yaml

@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core2048
+  - 2core4096

config/instances/ausyd1nxvm2022/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2023/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2024/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2025/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2026/config.yaml

@@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core2048
+  - 2core3072
 storage_volumes:
   nomad_server:
     pool: fastpool

config/instances/ausyd1nxvm2026/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2027/config.yaml

@@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core2048
+  - 2core3072
 storage_volumes:
   nomad_server:
     pool: fastpool

config/instances/ausyd1nxvm2027/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2028/config.yaml

@@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core2048
+  - 2core3072
 storage_volumes:
   nomad_server:
     pool: fastpool

config/instances/ausyd1nxvm2028/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2029/config.yaml

@@ -4,5 +4,5 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core2048
+  - 2core3072
 storage_volumes: {}

config/instances/ausyd1nxvm2029/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2030/config.yaml

@@ -4,5 +4,5 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core2048
+  - 2core3072
 storage_volumes: {}

config/instances/ausyd1nxvm2030/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2031/config.yaml

@@ -4,5 +4,5 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core2048
+  - 2core3072
 storage_volumes: {}

config/instances/ausyd1nxvm2031/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2032/config.yaml

@@ -4,5 +4,5 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_dmz1_eth0
-  - 2core2048
+  - 2core3072
 storage_volumes: {}

config/instances/ausyd1nxvm2032/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2033/config.yaml

@@ -4,5 +4,5 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_dmz1_eth0
-  - 2core2048
+  - 2core3072
 storage_volumes: {}

config/instances/ausyd1nxvm2033/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2034/config.yaml

@@ -4,5 +4,5 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_dmz1_eth0
-  - 2core2048
+  - 2core3072
 storage_volumes: {}

config/instances/ausyd1nxvm2034/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2035/config.yaml

@@ -4,5 +4,5 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core2048
+  - 2core3072
 storage_volumes: {}

config/instances/ausyd1nxvm2035/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2036/config.yaml

@@ -4,5 +4,5 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core2048
+  - 2core3072
 storage_volumes: {}

config/instances/ausyd1nxvm2036/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2037/config.yaml

@@ -4,5 +4,5 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core2048
+  - 2core3072
 storage_volumes: {}

config/instances/ausyd1nxvm2037/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2038/config.yaml

@@ -4,10 +4,10 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core2048
+  - 2core3072
 storage_volumes:
   prometheus:
     pool: fastpool
     path: /data
     config:
-      size: 50GB
+      size: 100GB

config/instances/ausyd1nxvm2038/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2039/config.yaml

@@ -4,10 +4,10 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core2048
+  - 2core3072
 storage_volumes:
   prometheus:
     pool: fastpool
     path: /data
     config:
-      size: 50GB
+      size: 100GB

config/instances/ausyd1nxvm2039/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2040/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2041/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2042/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2043/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2044/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2045/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2046/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2047/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2048/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2049/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2050/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2051/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2052/config.yaml

@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
   - disk20
   - net_com1_eth0
-  - 4core4096
+  - 4core6144

config/instances/ausyd1nxvm2052/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2053/config.yaml

@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
   - disk20
   - net_com1_eth0
-  - 4core4096
+  - 4core6144

config/instances/ausyd1nxvm2053/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2054/config.yaml

@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
   - disk20
   - net_com1_eth0
-  - 4core4096
+  - 4core6144

config/instances/ausyd1nxvm2054/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+

config/instances/ausyd1nxvm2055/config.yaml

@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
   - disk20
   - net_com1_eth0
-  - 4core4096
+  - 4core6144