# Cloudflare API token — required for all provider operations.
# Set via: export TF_VAR_cloudflare_api_token="..."
variable "cloudflare_api_token" {
  description = "Cloudflare API token with Workers, D1, R2, and DNS edit permissions."
  type        = string
  sensitive   = true
}

# Cloudflare account ID — required for R2 and D1 resources.
# Set via: export TF_VAR_cloudflare_account_id="..."
variable "cloudflare_account_id" {
  description = "Cloudflare account ID where pages resources are provisioned."
  type        = string
}

# Cloudflare zone ID for elijah.run — required for the DNS record and rate
# limiting ruleset.
# Set via: export TF_VAR_cloudflare_zone_id="..."
variable "cloudflare_zone_id" {
  description = "Cloudflare zone ID for the elijah.run domain."
  type        = string
}