feat: add Daedalus application configuration, database setup, and monitoring alerts

terraform/storage.tf

@@ -63,6 +63,23 @@ resource "incus_storage_bucket_key" "spelunker_key" {
   role           = "admin"
 }
 
+# S3 bucket for Daedalus file storage
+resource "incus_storage_bucket" "daedalus" {
+  name        = "daedalus"
+  pool        = var.storage_pool
+  project     = var.project_name
+  description = "Daedalus file storage bucket"
+}
+
+# Access key for Daedalus S3 bucket
+resource "incus_storage_bucket_key" "daedalus_key" {
+  name           = "daedalus-access"
+  pool           = incus_storage_bucket.daedalus.pool
+  storage_bucket = incus_storage_bucket.daedalus.name
+  project        = var.project_name
+  role           = "admin"
+}
+
 # Outputs for S3 credentials (to be stored in Ansible vault)
 output "lobechat_s3_credentials" {
   description = "Lobechat S3 bucket credentials - store in vault as vault_lobechat_s3_*"
@@ -96,3 +113,14 @@ output "spelunker_s3_credentials" {
   }
   sensitive = true
 }
+
+output "daedalus_s3_credentials" {
+  description = "Daedalus S3 bucket credentials - store in vault as vault_daedalus_s3_*"
+  value = {
+    bucket     = incus_storage_bucket.daedalus.name
+    access_key = incus_storage_bucket_key.daedalus_key.access_key
+    secret_key = incus_storage_bucket_key.daedalus_key.secret_key
+    endpoint   = "https://${incus_storage_bucket.daedalus.location}"
+  }
+  sensitive = true
+}