.gitea/workflows/build.yaml

@@ -1,32 +0,0 @@
----
-name: Build
-
-on:
-  pull_request:
-
-jobs:
-  build:
-    runs-on: almalinux-8
-    container:
-      image: git.unkin.net/unkin/almalinux9-actionsdind:latest
-      options: "--privileged --volume /etc/pki/tls/vault:/etc/pki/tls/vault:ro"
-
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v3
-        with:
-          fetch-depth: 0
-
-      - name: Fetch master branch
-        run: |
-          git fetch origin master:master
-
-      - name: Show changed files
-        run: |
-          git diff --name-only master
-
-      - name: Run Terraform Plan
-        env:
-          VAULT_ROLEID: ${{ secrets.TERRAFORM_INCUS_VAULT_ROLEID }}
-        run: |
-          make plan

.gitea/workflows/deploy.yaml

@@ -1,26 +0,0 @@
----
-name: Deploy
-
-on:
-  push:
-    branches:
-      - master
-
-jobs:
-  deploy:
-    runs-on: almalinux-8
-    container:
-      image: git.unkin.net/unkin/almalinux9-actionsdind:latest
-      options: "--privileged --volume /etc/pki/tls/vault:/etc/pki/tls/vault:ro"
-
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v3
-        with:
-          fetch-depth: 0
-
-      - name: Run Terraform Apply
-        env:
-          VAULT_ROLEID: ${{ secrets.TERRAFORM_INCUS_VAULT_ROLEID }}
-        run: |
-          make apply

Makefile

@@ -10,27 +10,8 @@ define vault_env
 	export PUPPET_CERT_CA=$$(vault kv get -field=public_key kv/service/puppet/certificates/ca) && \
 	export PUPPET_CERT_PUB=$$(vault kv get -field=public_key kv/service/puppet/certificates/terraform) && \
 	export PUPPET_CERT_PRIV=$$(vault kv get -field=private_key kv/service/puppet/certificates/terraform) && \
-	export TG_QUEUE_EXCLUDE_DIR="templates/base" && \
+	export TERRAGRUNT_EXCLUDE_DIR="templates/base" \
-	export TG_PROVIDER_CACHE=1 && \
+	export $$(vault read -format=json kv/data/service/terraform/incus | jq -r '.data.data | to_entries[] | "\(.key)=\(.value)"')
-	export TG_TF_PATH=terraform && \
-	eval "$$(vault read -format=json kv/data/service/terraform/incus \
-	  | jq -r '.data.data | to_entries[] | "export \(.key)=\(.value|@sh)"')" && \
-	export INCUS_CONFIG_DIR=$$(mktemp -d) && \
-	trap "rm -rf $$INCUS_CONFIG_DIR" EXIT && \
-	mkdir -p $$INCUS_CONFIG_DIR && \
-	mkdir -p $$INCUS_CONFIG_DIR/servercerts && \
-	printf '%s\n' "$$INCUS_CONF_INCUSIMAGES_CERT" > $$INCUS_CONFIG_DIR/servercerts/incus-images.crt && \
-	printf '%s\n' "$$INCUS_CONF_CONFIG_YAML" > $$INCUS_CONFIG_DIR/config.yml && \
-	if [ -f /etc/pki/tls/vault/certificate.crt ] && [ -f /etc/pki/tls/vault/private.key ]; then \
-		cp /etc/pki/tls/vault/certificate.crt $$INCUS_CONFIG_DIR/client.crt && \
-		cp /etc/pki/tls/vault/private.key $$INCUS_CONFIG_DIR/client.key; \
-	elif [ -f $$HOME/.config/incus/client.crt ] && [ -f $$HOME/.config/incus/client.key ]; then \
-		cp $$HOME/.config/incus/client.crt $$INCUS_CONFIG_DIR/client.crt && \
-		cp $$HOME/.config/incus/client.key $$INCUS_CONFIG_DIR/client.key; \
-	else \
-		printf '%s\n' "$$INCUS_CLIENT_CRT" > $$INCUS_CONFIG_DIR/client.crt && \
-		printf '%s\n' "$$INCUS_CLIENT_KEY" > $$INCUS_CONFIG_DIR/client.key; \
-	fi
 endef
 
 clean:
@@ -42,20 +23,20 @@ clean:
 
 init:
 	@$(call vault_env) && \
-	terragrunt run --all --non-interactive init -- -upgrade
+	terragrunt run-all --terragrunt-non-interactive init --upgrade
 
 plan: init
 	@$(call vault_env) && \
-	terragrunt run --all --parallelism 4 --non-interactive plan
+	terragrunt run-all --terragrunt-parallelism 8 --terragrunt-non-interactive plan
 
-apply: init
+apply:
 	@$(call vault_env) && \
-	terragrunt run --all --parallelism 2 --non-interactive apply
+	terragrunt run-all --terragrunt-parallelism 5 --terragrunt-non-interactive apply
 
 output:
 	@$(call vault_env) && \
 	rm -f tf_outputs.json && \
-	terragrunt run --all --parallelism 10 --non-interactive output -json >> tf_outputs.json
+	terragrunt run-all --terragrunt-parallelism 10 --terragrunt-non-interactive output -json >> tf_outputs.json
 
 hiera:
 	@echo "Setting up virtual environment with uv..."

config/globals/profiles.yaml

@@ -1,3 +1,4 @@
+# special devices
 gpu:
   description: "Pass-through Intel GPU"
   project: null
@@ -159,16 +160,6 @@ shared_apps_jellyfin:
       properties:
         source: /shared/apps/jellyfin
         path: /shared/apps/jellyfin
-shared_apps_maildata:
-  description: "Mount /shared/apps/maildata directly into the container"
-  project: null
-  config: {}
-  devices:
-    - type: disk
-      name: maildata-shared
-      properties:
-        source: /shared/apps/maildata
-        path: /shared/apps/maildata
 
 # storage
 disk10:
@@ -305,16 +296,6 @@ net_dmz1_eth1:
     limits.memory.enforce: hard
     limits.memory.swap: false
   devices: []
-2core3072:
-  description: "2 cores, 3GB RAM"
-  project: null
-  config:
-    boot.autostart: true
-    limits.cpu: 2
-    limits.memory: 3072MB
-    limits.memory.enforce: hard
-    limits.memory.swap: false
-  devices: []
 2core4096:
   description: "2 cores, 4GB RAM"
   project: null
@@ -325,16 +306,6 @@ net_dmz1_eth1:
     limits.memory.enforce: hard
     limits.memory.swap: false
   devices: []
-2core6144:
-  description: "2 cores, 6GB RAM"
-  project: null
-  config:
-    boot.autostart: true
-    limits.cpu: 2
-    limits.memory: 6144MB
-    limits.memory.enforce: hard
-    limits.memory.swap: false
-  devices: []
 4core4096:
   description: "4 cores, 4GB RAM"
   project: null
@@ -345,16 +316,6 @@ net_dmz1_eth1:
     limits.memory.enforce: hard
     limits.memory.swap: false
   devices: []
-4core6144:
-  description: "4 cores, 6GB RAM"
-  project: null
-  config:
-    boot.autostart: true
-    limits.cpu: 4
-    limits.memory: 6144MB
-    limits.memory.enforce: hard
-    limits.memory.swap: false
-  devices: []
 4core8192:
   description: "4 cores, 8GB RAM"
   project: null

config/instances/ausyd1nxvm2000/config.yaml

@@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core4096
+  - 2core2048
 disk_devices:
   - name: hashicorp-vault
     type: disk

config/instances/ausyd1nxvm2000/terragrunt.hcl

@@ -27,15 +27,21 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+  #before_hook "load_node_Venv" {
+  #  commands = ["apply", "plan", "destroy", "init"]
+  #  execute  = ["bash", "-c", "../../../../../../ci/set_node_env.sh"]
+  #}
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +54,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2001/config.yaml

@@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core4096
+  - 2core2048
 disk_devices:
   - name: hashicorp-vault
     type: disk

config/instances/ausyd1nxvm2001/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2002/config.yaml

@@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core4096
+  - 2core2048
 disk_devices:
   - name: hashicorp-vault
     type: disk

config/instances/ausyd1nxvm2002/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2003/config.yaml

@@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core4096
+  - 2core2048
 disk_devices:
   - name: hashicorp-vault
     type: disk

config/instances/ausyd1nxvm2003/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2004/config.yaml

@@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core4096
+  - 2core2048
 disk_devices:
   - name: hashicorp-vault
     type: disk

config/instances/ausyd1nxvm2004/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2005/config.yaml

@@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core4096
+  - 2core2048
 storage_volumes:
   consul:
     pool: fastpool

config/instances/ausyd1nxvm2005/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2006/config.yaml

@@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core4096
+  - 2core2048
 storage_volumes:
   consul:
     pool: fastpool

config/instances/ausyd1nxvm2006/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2007/config.yaml

@@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core4096
+  - 2core2048
 storage_volumes:
   consul:
     pool: fastpool

config/instances/ausyd1nxvm2007/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2008/config.yaml

@@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core4096
+  - 2core2048
 storage_volumes:
   consul:
     pool: fastpool

config/instances/ausyd1nxvm2008/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2009/config.yaml

@@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core4096
+  - 2core2048
 storage_volumes:
   consul:
     pool: fastpool

config/instances/ausyd1nxvm2009/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2010/config.yaml

@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core4096
+  - 2core2048

config/instances/ausyd1nxvm2010/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2011/config.yaml

@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core4096
+  - 2core2048

config/instances/ausyd1nxvm2011/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2012/config.yaml

@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core4096
+  - 2core2048

config/instances/ausyd1nxvm2012/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2013/config.yaml

@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core3072
+  - 2core2048

config/instances/ausyd1nxvm2013/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2014/config.yaml

@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core3072
+  - 2core2048

config/instances/ausyd1nxvm2014/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2015/config.yaml

@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core4096
+  - 2core2048

config/instances/ausyd1nxvm2015/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2016/config.yaml

@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core4096
+  - 2core2048

config/instances/ausyd1nxvm2016/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2017/config.yaml

@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core4096
+  - 2core2048

config/instances/ausyd1nxvm2017/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2018/config.yaml

@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core4096
+  - 2core2048

config/instances/ausyd1nxvm2018/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2019/config.yaml

@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core4096
+  - 2core2048

config/instances/ausyd1nxvm2019/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2020/config.yaml

@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core3072
+  - 2core2048

config/instances/ausyd1nxvm2020/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2021/config.yaml

@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core4096
+  - 2core2048

config/instances/ausyd1nxvm2021/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2022/config.yaml

@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core4096
+  - 2core2048

config/instances/ausyd1nxvm2022/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2023/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2024/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2025/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2026/config.yaml

@@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core3072
+  - 2core2048
 storage_volumes:
   nomad_server:
     pool: fastpool

config/instances/ausyd1nxvm2026/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2027/config.yaml

@@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core3072
+  - 2core2048
 storage_volumes:
   nomad_server:
     pool: fastpool

config/instances/ausyd1nxvm2027/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2028/config.yaml

@@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core3072
+  - 2core2048
 storage_volumes:
   nomad_server:
     pool: fastpool

config/instances/ausyd1nxvm2028/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2029/config.yaml

@@ -4,5 +4,5 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core3072
+  - 2core2048
 storage_volumes: {}

config/instances/ausyd1nxvm2029/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2030/config.yaml

@@ -4,5 +4,5 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core3072
+  - 2core2048
 storage_volumes: {}

config/instances/ausyd1nxvm2030/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2031/config.yaml

@@ -4,5 +4,5 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core3072
+  - 2core2048
 storage_volumes: {}

config/instances/ausyd1nxvm2031/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2032/config.yaml

@@ -4,5 +4,5 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_dmz1_eth0
-  - 2core3072
+  - 2core2048
 storage_volumes: {}

config/instances/ausyd1nxvm2032/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2033/config.yaml

@@ -4,5 +4,5 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_dmz1_eth0
-  - 2core3072
+  - 2core2048
 storage_volumes: {}

config/instances/ausyd1nxvm2033/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2034/config.yaml

@@ -4,5 +4,5 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_dmz1_eth0
-  - 2core3072
+  - 2core2048
 storage_volumes: {}

config/instances/ausyd1nxvm2034/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2035/config.yaml

@@ -4,5 +4,5 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core3072
+  - 2core2048
 storage_volumes: {}

config/instances/ausyd1nxvm2035/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2036/config.yaml

@@ -4,5 +4,5 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core3072
+  - 2core2048
 storage_volumes: {}

config/instances/ausyd1nxvm2036/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2037/config.yaml

@@ -4,5 +4,5 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core3072
+  - 2core2048
 storage_volumes: {}

config/instances/ausyd1nxvm2037/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2038/config.yaml

@@ -4,10 +4,10 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core3072
+  - 2core2048
 storage_volumes:
   prometheus:
     pool: fastpool
     path: /data
     config:
-      size: 100GB
+      size: 50GB

config/instances/ausyd1nxvm2038/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2039/config.yaml

@@ -4,10 +4,10 @@ cobbler_mgmt_classes:
 profiles:
   - disk10
   - net_com1_eth0
-  - 2core3072
+  - 2core2048
 storage_volumes:
   prometheus:
     pool: fastpool
     path: /data
     config:
-      size: 100GB
+      size: 50GB

config/instances/ausyd1nxvm2039/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2040/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2041/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2042/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2043/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2044/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2045/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2046/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2047/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2048/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2049/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2050/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2051/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2052/config.yaml

@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
   - disk20
   - net_com1_eth0
-  - 4core6144
+  - 4core4096

config/instances/ausyd1nxvm2052/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2053/config.yaml

@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
   - disk20
   - net_com1_eth0
-  - 4core6144
+  - 4core4096

config/instances/ausyd1nxvm2053/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2054/config.yaml

@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
   - disk20
   - net_com1_eth0
-  - 4core6144
+  - 4core4096

config/instances/ausyd1nxvm2054/terragrunt.hcl

@@ -27,15 +27,17 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = false
+      generate_client_certificates = true
       accept_remote_certificate    = true
-      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -48,7 +50,3 @@ generate "incus" {
     }
   EOF
 }
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
-

config/instances/ausyd1nxvm2055/config.yaml

@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
   - disk20
   - net_com1_eth0
-  - 4core6144
+  - 4core4096