# Generate root backend.tf
generate "backend" {
  path      = "backend.tf"
  if_exists = "overwrite"
  contents  = <<EOF
locals {
  vault_addr = "https://vault.service.consul:8200"
}

provider "vault" {
  address = local.vault_addr
}

terraform {
  backend "consul" {
    address = "https://consul.service.consul"
    path    = "infra/terraform/vault/${path_relative_to_include()}/state"
    scheme  = "https"
    lock    = true
    ca_file = "/etc/pki/tls/certs/ca-bundle.crt"
  }
  required_version = ">= 1.10"
  required_providers {
    vault = {
      source  = "hashicorp/vault"
      version = "5.6.0"
    }
    consul = {
      source  = "hashicorp/consul"
      version = "2.23.0"
    }
  }
}
EOF
}