Merge pull request #36 from tahoe-lafs/29.no-users-just-hcloud-keys

Drop the users and define only ssh keys for Hetzner provider

Author: btlogy

tf/core/providers.tf

@@ -12,3 +12,14 @@ terraform {
 provider "hcloud" {
   token = var.hcloud_token
 }
+
+# Manage ssh authorized keys so Hetzner can use them to provision our resources (e.g.: new VPS)
+resource "hcloud_ssh_key" "ssh_keys" {
+  for_each = {
+    tf-benoit-000619776016  = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIZtWY7t8HVnaz6bluYsrAlzZC3MZtb8g0nO5L5fCQKR benoit@leastauthority.com"
+    tf-florian-000018054987 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJlPneIaRT/mqu13N83ctEftub4O6zAfi6qgzZKerU5o florian@leastauthority.com"
+  }
+
+  name       = each.key
+  public_key = each.value
+}

tf/core/srv_webforge.tf

@@ -13,7 +13,7 @@ resource "hcloud_server" "webforge" {
     "env" : "prod"
     "source" : "tf-tahoe-lafs-core"
   }
-  ssh_keys  = [for k, v in local.ssh_keys : "tf-${v.name}"]
+  ssh_keys  = [for k in hcloud_ssh_key.ssh_keys : k.name]
   user_data = <<EOF
 #cloud-config