improve transfersh deployment

Author: TomTasche

.gitignore

@@ -69,12 +69,11 @@ fastlane/report.xml
 
 app/CMakeUserPresets.json
 
-infra/scw-transfer/terraform.tfvars
-
 venv/
 
 infra/scw-transfer/.terraform/
 infra/scw-transfer/.terraform.lock.hcl
+infra/scw-transfer/secret.auto.tfvars
 
 # Terraform state files
 *.tfstate

infra/scw-transfer/secret.auto.tfvars.example

@@ -0,0 +1,5 @@
+# Copy to secret.auto.tfvars (gitignored) and fill with live credentials or use SCW_* env vars instead.
+
+project_id = "00000000-0000-0000-0000-000000000000"
+access_key = "SCWXXXXXXXXXXXXXXXXX"
+secret_key = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"

infra/scw-transfer/terraform.tfvars

@@ -1,27 +1,24 @@
-# Scaleway credentials and deployment settings for transfer.sh
-# Fill in the project ID and adjust names/limits as needed.
+# Deployment settings for transfer.sh (non-secret values).
+# Put project_id/access_key/secret_key in infra/scw-transfer/secret.auto.tfvars (gitignored) or set SCW_* env vars.
 
-project_id            = "xxxx"
-access_key            = "xxxx"    # or leave unset to use SCW_ACCESS_KEY env var
-secret_key            = "xxxx"    # or leave unset to use SCW_SECRET_KEY env var
-region                = "nl-ams"
-zone                  = "nl-ams-1"
+region               = "nl-ams"
+zone                 = "nl-ams-1"
 
-namespace_name        = "transfer-sh"
-container_name        = "transfer-sh"
+namespace_name       = "transfer-sh"
+container_name       = "transfer-sh"
 
-registry_image        = "rg.nl-ams.scw.cloud/funcscwtransfershxuil1jyq/transfer-sh:v1.6.1"
+registry_image       = "rg.nl-ams.scw.cloud/funcscwtransfershxuil1jyq/transfer-sh:v1.6.1"
 
-purge_days            = 1
-purge_interval_hours  = 1
-max_upload_size       = 51200
-storage_dir           = "/data"
-port                  = 8080
-cpu_limit_millicpu    = 350
-memory_limit_mb       = 512
-min_scale             = 1
-max_scale             = 1
-healthcheck_path      = "/"
+purge_days           = 1
+purge_interval_hours = 1
+max_upload_size      = 51200
+storage_dir          = "/data"
+port                 = 8080
+cpu_limit_millicpu   = 350
+memory_limit_mb      = 512
+min_scale            = 1
+max_scale            = 1
+healthcheck_path     = "/"
 
 environment_variables = {
   TMPDIR = "/data"