# Terraform block: local state (terraform.tfstate is gitignored, no remote
# backend needed for this project) and the Cloudflare provider version pin.
# Pinned to the same major version as ../quotesdb/infra for consistency
# across the mono-repo.
terraform {
  required_providers {
    # Cloudflare provider for R2, D1, DNS, and rate limiting.
    cloudflare = {
      source  = "registry.terraform.io/cloudflare/cloudflare"
      version = "~> 4"
    }
  }
}

# Cloudflare provider configuration.
# Authentication uses an API token passed via var.cloudflare_api_token.
# Never hardcode credentials here — use TF_VAR_* env vars or a gitignored .tfvars file.
provider "cloudflare" {
  api_token = var.cloudflare_api_token
}