terraform {
  required_version = "< 2.0.0"
  backend "pg" {
    conn_str    = "postgres://10.234.158.153:5432/tf_state?sslmode=require"
    schema_name = "internal_forgejo"
  }

  required_providers {
    forgejo = {
      source  = "registry.terraform.io/svalabs/forgejo"
      version = "~> 1.4"
    }
    tls = {
      source  = "hashicorp/tls"
      version = "~> 4.0"
    }
    vault = {
      source  = "hashicorp/vault"
      version = "~> 5.0"
    }
  }
}

provider "vault" {}

ephemeral "vault_kv_secret_v2" "forgejo_admin" {
  mount = var.vault_kv_mount
  name  = var.forgejo_admin_vault_path
}

locals {
  forgejo_admin_api_token = ephemeral.vault_kv_secret_v2.forgejo_admin.data[var.forgejo_admin_api_token_key]
}

provider "forgejo" {
  host      = var.forgejo_host
  api_token = local.forgejo_admin_api_token
}