variable "name" {
  type = string
}

variable "vpc_id" {
  type = string
}

variable "private_subnet_ids" {
  type = list(string)
}

variable "vpc_cidr" {
  description = "VPC CIDR used to scope RDS ingress (private subnets only)"
  type        = string
}

variable "database_name" {
  type    = string
  default = "access_core"
}

variable "username" {
  type    = string
  default = "access_user"
}

variable "password" {
  type      = string
  sensitive = true
}

variable "instance_class" {
  type    = string
  default = "db.t3.small"
}

variable "allocated_storage_gb" {
  type    = number
  default = 20
}

variable "max_allocated_storage_gb" {
  description = "Auto-scaling storage ceiling (0 disables)"
  type        = number
  default     = 0
}

variable "multi_az" {
  type    = bool
  default = false
}

variable "storage_encrypted" {
  type    = bool
  default = true
}

variable "kms_key_id" {
  description = "KMS key ARN for storage encryption (required when storage_encrypted)"
  type        = string
  default     = ""
}

variable "backup_retention_days" {
  type    = number
  default = 7
}

variable "deletion_protection" {
  type    = bool
  default = false
}

variable "final_snapshot" {
  type    = bool
  default = false
}

variable "tags" {
  type    = map(string)
  default = {}
}