variable "region" { type = string default = "us-east-1" } variable "vpc_cidr" { description = "Staging VPC CIDR (single AZ)" type = string default = "10.3.0.0/16" } variable "image_tag" { description = "Container image tag to deploy" type = string default = "latest" } variable "alb_certificate_arn" { description = "ACM certificate ARN for the ALB (HTTPS). Empty for HTTP-only." type = string default = "" } variable "desired_count" { description = "Fixed task count (staging does not autoscale)" type = number default = 2 } variable "public_domain" { description = "Custom domain fronting the ALB (added to ALLOWED_HOSTS alongside *.elb.amazonaws.com); empty until Route53 is wired" type = string default = "" } variable "alert_emails" { description = "Email addresses that receive CloudWatch alarm notifications via SNS (each must confirm the subscription once)" type = list(string) default = [] }