# Machine virtuelle Linux
resource "proxmox_vm_qemu" "docker_nodes" {
  count       = 2 # On déploie 2 VMs d'un coup !
  name        = "srv-docker-${count.index + 1}"
  target_node = "pve00"           # Ton HP Gen 10+ avec le RAID 10
  vmid        = 530 + count.index # IDs 530 et 531 pour les deux VMs Docker
  # storage      = "VM_POOL_RAID10" # Stockage en LVM pour de meilleures performances
  clone = "debian13-cloundinit-template" # (debian13-cloundinit-template) Clone à partir du template Debian 13 que tu as créé

  # FORCE LE CONTROLEUR VIRTIO SCSI
  scsihw = "virtio-scsi-single"

  # Disque de 20 Go sur le stockage local-zfs (RAID 10)
  disks {
    scsi {
      scsi0 {
        disk {
          size    = "20G"
          storage = "VM_POOL_RAID10"
          # S'ASSURER QUE LE TYPE EST BIEN SCSI
          iothread = true
        }
      }
    }
  }

  # Configuration CPU/RAM
  cpu {
    cores   = 2
    sockets = 1
  }

  memory = 4096

  agent = 1 # Active le QEMU Guest Agent

  # Réseau : VLAN 530 (Docker)
  network {
    id        = 0
    model     = "virtio"
    bridge    = "vmbr1"
    tag       = 530
    firewall  = false
    link_down = false
  }

  # Cloud-Init : IPs statiques automatiques
  ipconfig0 = "ip=192.168.30.2${count.index}/24,gw=192.168.30.254"

  ssh_user        = "root"
  ssh_private_key = <<EOF
  -----BEGIN RSA PRIVATE KEY-----
  PuTTY-User-Key-File-3: ssh-rsa
  Encryption: none
  Comment: rsa-key-20260319
  Public-Lines: 6
  AAAAB3NzaC1yc2EAAAADAQABAAABAQC/4+tQiMd1sneZ3pIiWbfjWSJyorSPTfPZ
  dXeUcN30R3G/dN8YbQlDMVCKBOEMps87q1gUpwBWmCvCcr9VsWlSq69nXD27EmBf
  0vtzbYW49zQzNda8dJfD1Bna0/2PjA6xHBiGS/FT0QhDU1KQqqiCtMI6Ho/5OrOl
  IGmIW9Adlq0ORXidV/FQWdJwn6OowpCtJpHp34iJ3C316H+71xoIvBd5SIRbowyS
  BaQibIknQuapcgpAI5glpyQkjHNT3AVPupZ1bO43pZMp3rb/gz6bb1+K5yMHjahY
  BwjY0+Gsbp31Ln2z9gpxecrB65+fli2L43S+lbn4YM7Tu8nZ8fON
  Private-Lines: 14
  AAABADsiHY3/2Jeom7rLH/V9+HETMs5o3YOb3h2RWXxhG8T/j0oU1ftM/qG6PLuL
  rV6cuRgGQWp73FrTIgkWG2ho97AGQFN11YAktZZSCjMT+TV62Jc/bCE/PNWYMy+A
  TI9D9fMWWWhpVsEhlY5JyxPRw4Qj+Aa5DF0dfebRCjR/Nq8nCdL2046KXmJBfGFD
  6xjMcT6NW7b/fqJKZdV2JpIKFNM+0ohGwgqjvyJH4fAXf5VCeI6jtmozawvj6/2t
  v5WAyXYhI3T6srwhVTeD4out5g06v6KUxLWVtRJhgeroao6A3CtjKRmFrXdHyJIy
  JbZFSNpOqudFYpH9xQDeiAISvoEAAACBAP77YGp9QY0X6zsRxSDQzI83mB44atZH
  /mMyak1M1cOniV7KmKZFFFlgHNyxLLhjCMfJxZEA5/3beAk7lsN4SU7L7rRM77a6
  dk0jhqABKplSG75GwKOtyCaZPvIENEadbkSCKkZLeTTfD8NQXQ3NKfxA72u2LE0d
  ux3NqntCBq5FAAAAgQDAqA4XvdnkFfSd7VNU/7fRWs2Mbomqrg3Bb6FVd5DXc/Z2
  ragUoH93cOUgLFNXHsG6d62gXZSsGGgYz5YLfNrgaMoWtd9uqzjj2lHgvyohA1ij
  evSQW2oBNjSXDa+CBmOklpFeIv06NJj7Zt/zA7gBOz3K/5X4S6j//FaoYYfIqQAA
  AIEA7UD4j3PuUnCiTpcDELrQwRzQV0c8u2PHtYeA3rIh4J1FH3hmCt7jJ92x2/A+
  9n3QLtcHo/MkiWcjdS7OMpuWkUDEV0HvV5/ZuYFs32UfJAEBUTKp8NEyjte1Fm74
  q1xTWj/lgHL+sgaNjMzaebAub5m8pIiPGZK7v4xJSdsDxzU=
  Private-MAC: 3d0150f25c68a131b885cfa43fa9f96141154d3b419159af81216e1dd23efa01
  -----END RSA PRIVATE KEY-----
  EOF

  /*   tags = {
    environment = var.environment_tag
  } */

  /*   depends_on = [
    azurerm_network_interface.nic,
    azurerm_network_security_group.nsg
  ] */
  # Injecte ta clé SSH pour qu'Ansible puisse se connecter après
  sshkeys = <<EOF
  ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/4+tQiMd1sneZ3pIiWbfjWSJyorSPTfPZdXeUcN30R3G/dN8YbQlDMVCKBOEMps87q1gUpwBWmCvCcr9VsWlSq69nXD27EmBf0vtzbYW49zQzNda8dJfD1Bna0/2PjA6xHBiGS/FT0QhDU1KQqqiCtMI6Ho/5OrOlIGmIW9Adlq0ORXidV/FQWdJwn6OowpCtJpHp34iJ3C316H+71xoIvBd5SIRbowySBaQibIknQuapcgpAI5glpyQkjHNT3AVPupZ1bO43pZMp3rb/gz6bb1+K5yMHjahYBwjY0+Gsbp31Ln2z9gpxecrB65+fli2L43S+lbn4YM7Tu8nZ8fON rsa-key-20260319
  EOF
}