output "admin_ssh_key_ids" {
  description = "IDs of admin SSH keys"
  value       = [for key in digitalocean_ssh_key.admin : key.id]
}

output "deploy_ssh_key_id" {
  description = "ID of the deploy SSH key"
  value       = digitalocean_ssh_key.deploy.id
}

output "all_ssh_key_ids" {
  description = "All SSH key IDs (admin + deploy)"
  value = concat(
    [for key in digitalocean_ssh_key.admin : key.id],
    [digitalocean_ssh_key.deploy.id]
  )
}

output "internal_ssh_key_id" {
  description = "ID of the internal VPC SSH key"
  value       = digitalocean_ssh_key.internal.id
}

output "forgejo_ssh_key_ids" {
  description = "SSH key IDs for Forgejo (internal only - access via jump host)"
  value       = [digitalocean_ssh_key.internal.id]
}

output "deploy_key_fingerprint" {
  description = "Fingerprint of the deploy key"
  value       = digitalocean_ssh_key.deploy.fingerprint
}

output "deploy_private_key" {
  description = "Private key for deployment (add to Forgejo secrets)"
  value       = tls_private_key.deploy.private_key_openssh
  sensitive   = true
}

output "deploy_public_key" {
  description = "Public key for deployment"
  value       = tls_private_key.deploy.public_key_openssh
}

output "internal_private_key" {
  description = "Private key for jump host → internal servers"
  value       = tls_private_key.internal.private_key_openssh
  sensitive   = true
}

output "internal_public_key" {
  description = "Public key for internal server authentication"
  value       = tls_private_key.internal.public_key_openssh
}