variable "region" {
  description = "Region string advertised by VersityGW."
  type        = string
  default     = "us-east-1"
}

variable "s3_endpoint" {
  description = "VersityGW S3 API endpoint."
  type        = string
  default     = "https://s3.quorate.internal"
}

variable "admin_endpoint" {
  description = "VersityGW admin API endpoint."
  type        = string
  default     = "https://s3-admin.quorate.internal"
}

variable "minio_server" {
  description = "VersityGW S3 endpoint host[:port] for the MinIO-compatible Terraform provider."
  type        = string
  default     = "s3.quorate.internal"
}

variable "minio_ssl" {
  description = "Use TLS when connecting to VersityGW through the MinIO-compatible Terraform provider."
  type        = bool
  default     = true
}

variable "canary_bucket_name" {
  description = "Initial bucket used to prove VersityGW bucket and policy compatibility."
  type        = string
  default     = "canary"
}

variable "canary_principal" {
  description = "VersityGW user/access key ID allowed to exercise the canary bucket."
  type        = string
  default     = "canary"
}

variable "canary_vault_secret_path" {
  description = "Vault KV v2 secret path containing the canary VersityGW secretAccessKey."
  type        = string
  default     = "versitygw/users/canary"
}

variable "root_vault_secret_path" {
  description = "Vault KV v2 secret path containing the VersityGW root/admin credentials."
  type        = string
  default     = "versitygw/root"
}

variable "root_access_key_id_key" {
  description = "Key in root_vault_secret_path containing the VersityGW root/admin access key ID."
  type        = string
  default     = "rootAccessKeyId"
}

variable "root_secret_access_key_key" {
  description = "Key in root_vault_secret_path containing the VersityGW root/admin secret access key."
  type        = string
  default     = "rootSecretAccessKey"
}

variable "terraform_state_bucket_name" {
  description = "Bucket used for OpenTofu remote state."
  type        = string
  default     = "terraform-state"
}

variable "terraform_state_principal" {
  description = "VersityGW user/access key ID allowed to read and write OpenTofu remote state."
  type        = string
  default     = "terraform-state"
}

variable "terraform_state_vault_secret_path" {
  description = "Vault KV v2 secret path containing the Terraform state user secretAccessKey."
  type        = string
  default     = "versitygw/users/terraform-state"
}

variable "quay_bucket_name" {
  description = "Bucket used by Quay for live registry blob storage."
  type        = string
  default     = "quay-registry"
}

variable "quay_principal" {
  description = "VersityGW user/access key ID allowed to use the Quay registry bucket."
  type        = string
  default     = "quay"
}

variable "quay_vault_secret_path" {
  description = "Vault KV v2 secret path containing the Quay VersityGW secretAccessKey."
  type        = string
  default     = "versitygw/users/quay"
}

variable "forgejo_bucket_name" {
  description = "Bucket used by Forgejo for attachments and avatars."
  type        = string
  default     = "forgejo"
}

variable "forgejo_principal" {
  description = "VersityGW user/access key ID allowed to use the Forgejo bucket."
  type        = string
  default     = "forgejo"
}

variable "forgejo_vault_secret_path" {
  description = "Vault KV v2 secret path containing the Forgejo VersityGW secretAccessKey."
  type        = string
  default     = "versitygw/users/forgejo"
}

variable "forgejo_public_bucket_name" {
  description = "Bucket used by public Forgejo for attachments and avatars."
  type        = string
  default     = "forgejo-public"
}

variable "forgejo_public_principal" {
  description = "VersityGW user/access key ID allowed to use the public Forgejo bucket."
  type        = string
  default     = "forgejo-public"
}

variable "forgejo_public_vault_secret_path" {
  description = "Vault KV v2 secret path containing the public Forgejo VersityGW secretAccessKey."
  type        = string
  default     = "versitygw/users/forgejo-public"
}

variable "zot_bucket_name" {
  description = "Bucket used by Zot for bootstrap registry blob storage."
  type        = string
  default     = "zot"
}

variable "zot_principal" {
  description = "VersityGW user/access key ID allowed to use the Zot bootstrap registry bucket."
  type        = string
  default     = "zot"
}

variable "zot_vault_secret_path" {
  description = "Vault KV v2 secret path containing the Zot VersityGW secretAccessKey."
  type        = string
  default     = "versitygw/users/zot"
}

variable "argo_bucket_name" {
  description = "Bucket used by Argo Workflows for workflow artifacts and optional log archive."
  type        = string
  default     = "argo-workflows"
}

variable "argo_principal" {
  description = "VersityGW user/access key ID allowed to use the Argo artifacts bucket."
  type        = string
  default     = "argo"
}

variable "argo_vault_secret_path" {
  description = "Vault KV v2 secret path containing the Argo VersityGW secretAccessKey."
  type        = string
  default     = "versitygw/users/argo"
}

variable "project_delivery_cache_bucket_name" {
  description = "Bucket used by project delivery build caches."
  type        = string
  default     = "project-delivery"
}

variable "project_delivery_cache_reader_principal" {
  description = "VersityGW user allowed to read project delivery build caches."
  type        = string
  default     = "project-delivery-cache-reader"
}

variable "project_delivery_cache_reader_vault_secret_path" {
  description = "Vault KV v2 secret path containing the project delivery cache reader secretAccessKey."
  type        = string
  default     = "versitygw/users/project-delivery-cache-reader"
}

variable "project_delivery_cache_writer_principal" {
  description = "VersityGW user allowed to inspect and write project delivery build caches."
  type        = string
  default     = "project-delivery-cache-writer"
}

variable "project_delivery_cache_writer_vault_secret_path" {
  description = "Vault KV v2 secret path containing the project delivery cache writer secretAccessKey."
  type        = string
  default     = "versitygw/users/project-delivery-cache-writer"
}

variable "dump_bucket_name" {
  description = "Bucket used for non-sensitive raw data."
  type        = string
  default     = "dump"
}

variable "dump_hardware_qualification_writer_principal" {
  description = "VersityGW user allowed to write hardware qualification data."
  type        = string
  default     = "hardware-qualification-writer"
}

variable "dump_hardware_qualification_writer_vault_secret_path" {
  description = "Vault KV v2 secret path containing the hardware qualification writer secretAccessKey."
  type        = string
  default     = "versitygw/users/hardware-qualification-writer"
}

variable "stalwart_bucket_name" {
  description = "Bucket used by Stalwart for message bodies and attachments."
  type        = string
  default     = "stalwart"
}

variable "stalwart_principal" {
  description = "VersityGW user/access key ID allowed to use the Stalwart bucket."
  type        = string
  default     = "stalwart"
}

variable "stalwart_vault_secret_path" {
  description = "Vault KV v2 secret path containing the Stalwart VersityGW secretAccessKey."
  type        = string
  default     = "versitygw/users/stalwart"
}