variables.tf

variable "aws_region" {
  description = "AWS region to deploy into"
  type        = string
  default     = "us-east-1"
}

variable "project_name" {
  description = "Used as a prefix for all resource names"
  type        = string
}

variable "environment" {
  description = "e.g. dev, staging, prod"
  type        = string
}

variable "ecr_image_uri" {
  description = "Full ECR image URI — e.g. 123456789.dkr.ecr.us-east-1.amazonaws.com/my-app:latest"
  type        = string
}

variable "vault_addr" {
  description = "Vault server address — e.g. https://vault.example.com"
  type        = string
}

variable "vault_role" {
  description = "Vault AWS IAM auth role name configured for this app"
  type        = string
}

variable "task_cpu" {
  description = "Fargate task CPU units (256, 512, 1024, 2048, 4096)"
  type        = number
  default     = 1024
}

variable "task_memory" {
  description = "Fargate task memory in MiB"
  type        = number
  default     = 2048
}

variable "subnet_ids" {
  description = "Private subnet IDs for Fargate tasks"
  type        = list(string)
}

variable "security_group_ids" {
  description = "Security group IDs for Fargate tasks"
  type        = list(string)
}

variable "log_retention_days" {
  description = "CloudWatch log retention in days"
  type        = number
  default     = 30
}