output "hosts" {
  value = {
    for subdomain in distinct([for record in ovh_domain_zone_record.server_records : record.subdomain]) : 
    subdomain => {
      "ipv4_address" = try(
        ovh_domain_zone_record.server_records["${subdomain}:ipv4"].target, 
        null
      )
      "ipv6_address" = try(
        ovh_domain_zone_record.server_records["${subdomain}:ipv6"].target, 
        null
      )
    }
  }
}

output "authentik_data" {
  value = {
    for key, val in local.service_auths : key => {
      "base_url"      = "${var.authentik_url}/application/o/${authentik_application.service_applications[key].slug}"
      "client_id"     = authentik_provider_oauth2.service_providers[key].client_id
      "client_secret" = authentik_provider_oauth2.service_providers[key].client_secret
    }
  }
  sensitive = true
}

output "postgresql_service_roles" {
  value = postgresql_role.service_roles
  sensitive = true
}

output "postgresql" {
  value = {
    "host" = var.postgresql_host
    "port" = var.postgresql_port
  }
}

output "scaleway_service_keys" {
  value       = scaleway_iam_api_key.service_keys
  sensitive   = true
}

output "scaleway_service_buckets" {
  value       = scaleway_object_bucket.service_buckets
}

output "scaleway_registry_endpoint_public" {
  value = scaleway_registry_namespace.public.endpoint
}

output "scaleway_registry_endpoint_private" {
  value = scaleway_registry_namespace.private.endpoint
}