terraform {
  required_providers {
    proxmox = {
      source  = "telmate/proxmox"
      version = "~> 2.9"
    }
  }
}

provider "proxmox" {
  pm_api_url          = var.proxmox_host
  pm_api_token_id     = var.proxmox_token_id
  pm_api_token_secret = var.proxmox_token_secret
  pm_tls_insecure     = true
}

# Create staging LXC mit pct-Befehl
resource "null_resource" "staging_lxc" {
  # SSH Public Key in Datei schreiben
  provisioner "local-exec" {
    command = "mkdir -p /tmp/terraform && echo '${var.ssh_public_key}' > /tmp/terraform/staging_key.pub"
  }

  provisioner "local-exec" {
    command = <<-EOT
      pct create 200 \
        ${var.lxc_ostemplate} \
        --hostname hugo-staging \
        --cores ${var.lxc_cores} \
        --memory ${var.lxc_memory} \
        --swap ${var.lxc_swap} \
        --rootfs ${var.lxc_rootfs} \
        --net0 name=eth0,bridge=${var.lxc_bridge},ip=${var.staging_ip}/24,gw=${var.staging_gw} \
        --unprivileged 1 \
        --start 1 \
        --password "${var.root_password}" \
        --ssh-public-keys /tmp/terraform/staging_key.pub
    EOT
  }

  provisioner "local-exec" {
    command = "sleep 30"
  }

  # SSH Key Setup
  provisioner "local-exec" {
    command = "mkdir -p ~/.ssh && echo '${var.ssh_private_key}' | base64 -d > ~/.ssh/staging_key && chmod 600 ~/.ssh/staging_key"
  }

  # Setup via SSH
  provisioner "remote-exec" {
    inline = [
      "apt-get update -qq",
      "apt-get install -y hugo nginx git rsync curl",
      "systemctl enable --now nginx",
      "useradd -m -s /bin/bash deploy 2>/dev/null || true",
      "mkdir -p /home/deploy/.ssh",
      "chmod 700 /home/deploy/.ssh",
      "echo '${var.ssh_public_key}' >> /home/deploy/.ssh/authorized_keys",
      "chmod 600 /home/deploy/.ssh/authorized_keys",
      "chown -R deploy:deploy /home/deploy/.ssh",
      "mkdir -p /var/www/html",
      "chown -R deploy:deploy /var/www/html",
      "echo '✅ Staging VM Setup complete!'"
    ]

    connection {
      type        = "ssh"
      user        = "root"
      private_key = var.ssh_private_key
      host        = var.staging_ip
      timeout     = "5m"
    }
  }
}

output "staging_ip" {
  value = "${var.staging_ip}/24"
}