# vm-data — Data plane (CERTifAI, compliance, pg-app, MongoDB, MinIO).
# Scale driver — bump flavor at Tier B/C per §13.

[vm]
name = "vm-data"
env = "prod"
flavor = "m2.medium"    # 4 vCPU, 16 GB RAM (Tier B bump: m2.large)
public_ip = false
region = "DUS2"
private_network = "platform-prod"
private_ip_cidr = "10.0.3.0/24"

[vm.disk]
block_volume_gb = 500   # MongoDB + pg-app + Qdrant + MinIO, fast growth (scales with N customers)

[vm.firewall]
ingress_public = []
ingress_private = [
  { proto = "tcp", ports = "all", source = "10.0.0.0/16", purpose = "intra-platform" },
]