# 🤖

output "ie_node_ip" {
  description = "The Dublin node's stable public IP (the *.ie.dev.11ch.at target)"
  value       = aws_eip.ie_node.public_ip
}

output "mesh_bucket" {
  value = aws_s3_bucket.mesh.bucket
}

# The Route53 zone's authoritative nameservers — the values the DNSimple `dev`
# NS delegation points at (dns.tf wires this automatically). Handy to eyeball
# delegation propagation: `dig NS dev.11ch.at` should return these.
output "dev_zone_id" {
  value = aws_route53_zone.dev.zone_id
}

output "dev_zone_nameservers" {
  value = aws_route53_zone.dev.name_servers
}

# The Helsinki node's scoped S3 credential. Secret is sensitive — read it with
# `tofu output -raw fi_node_secret_key` and seal it straight into the vault
# (never commit, never echo into a shared transcript).
output "fi_node_access_key_id" {
  value = aws_iam_access_key.fi_node.id
}

output "fi_node_secret_key" {
  value     = aws_iam_access_key.fi_node.secret
  sensitive = true
}