terraform {
  required_version = ">= 1.11.0, < 2.0.0"

  backend "pg" {
    conn_str    = "postgres://10.234.158.153:5432/tf_state?sslmode=require"
    schema_name = "ext_cf_pages"
  }

  required_providers {
    cloudflare = {
      source  = "cloudflare/cloudflare"
      version = "5.22.0"
    }
    vault = {
      source  = "hashicorp/vault"
      version = "5.10.1"
    }
  }
}

provider "vault" {}

ephemeral "vault_kv_secret_v2" "pages" {
  mount = "secret"
  name  = "cloudflare/pages-infrastructure"
}

provider "cloudflare" {
  api_token = ephemeral.vault_kv_secret_v2.pages.data["api-token"]
}