# The staging template — a server-class box: docker + rig, no agent, no creds.
# KEY="value" only. Parsed against an allowlist, never sourced; there is no
# key for a network or a security flag, on purpose — the shared box-net
# profile is the placement contract and no template can weaken it.
# BOX_USER must match the user user-data.yaml creates.
#
# BOX_REQUIRE_VM: no container fallback — the VM is the staging trust
# boundary, and the guest runs docker. BOX_AUTOSTART: a staging server must
# come back on its own after a host reboot. Resources are build-sized: the
# control plane builds on the target.
BOX_DESCRIPTION="Server-class staging VM: docker + rig preinstalled; converge with 'rig bootstrap workload' inside, then register in the control plane"
BOX_IMAGE="images:debian/13/cloud"
BOX_USER="ops"
BOX_CPU="4"
BOX_MEMORY="8GiB"
BOX_DISK="100GiB"
BOX_REQUIRE_VM="1"
BOX_AUTOSTART="1"