resource "engineer" "jouls" {
  role  = "DevOps Engineer"
  cloud = "aws"

  focus = [
    "infrastructure as code",
    "ci/cd pipelines",
    "container platforms",
    "cost visibility",
  ]

  optimizes_for = "reproducible, reviewable, boring to operate"

  lifecycle {
    prevent_destroy = true
  }
}

locals {
  # multiple AWS regions, each with its own state backend
  regions      = ["primary", "secondary"]
  environments = ["uat", "staging", "prod"]

  # separate state, separate credentials, separate blast radius
  isolation = "per-region, per-environment"
}

# development is where I came from; infrastructure is where I work
moved {
  from = module.developer
  to   = module.devops
}

module "cloud" {
  source = "./modules/aws"

  services = [
    "eks", "ecr", "ec2", "s3", "rds",
    "vpc", "iam", "route53", "cloudwatch", "cost-explorer",
  ]
}

module "iac" {
  source = "./modules/iac"

  tools = ["terraform", "helm", "yaml"]
}

module "ci_cd" {
  source = "./modules/ci-cd"

  tools = ["github-actions", "git", "bash", "python"]
}

module "runtime" {
  source = "./modules/runtime"

  tools = ["docker", "kubernetes", "nginx", "linux"]
}

module "data" {
  source = "./modules/data"

  engines = ["postgresql", "mongodb", "mysql"]
}

locals {
  hobbies = {
    odoo = ["python", "postgresql", "qweb", "xml"]
    mern = ["mongodb", "express", "react", "node"]
  }
}

# created only when capacity allows — never on the critical path
resource "side_project" "hobby" {
  for_each = var.free_time > 0 ? local.hobbies : {}

  name  = each.key
  stack = each.value
}