# EG334S school-account deployment configuration
#
# Copy this file outside the repository, fill in the values, and protect it:
#   cp docs/iac/school-account.env.example /secure/path/school-account.env
#   chmod 600 /secure/path/school-account.env
#   source /secure/path/school-account.env
#
# This file contains no VPN pre-shared key, SSH private key or cloud token.

export EG334S_AWS_PROFILE="school"
export EG334S_EXPECTED_ACCOUNT_ID="REPLACE_WITH_12_DIGIT_SCHOOL_ACCOUNT_ID"
export EG334S_ADMIN_CIDR="REPLACE_WITH_APPROVED_PUBLIC_IPV4/32"
export EG334S_USE1_KEYPAIR="REPLACE_WITH_US_EAST_1_KEY_PAIR"
export EG334S_EUW1_KEYPAIR="REPLACE_WITH_EU_WEST_1_KEY_PAIR"
export EG334S_MONITORING_EMAIL="REPLACE_WITH_TEAM_MONITORING_EMAIL"

# Stack names may be changed, but keep the same prefix for easy inventory and
# teardown. They must not collide with unrelated school resources.
export EG334S_STACK_PREFIX="eg334s-school"

# Cloud writes are blocked unless this exact value is set deliberately for the
# attended deployment window.
export EG334S_EXECUTE="NO"