use suggestions

Author: doublethink13

main.tf

@@ -15,12 +15,9 @@ locals {
   tailscale_set_extra_flags_enabled = length(var.tailscale_set_extra_flags) > 0
 
   userdata = templatefile("${path.module}/userdata.sh.tmpl", {
-    authkey           = try(
-      coalesce(
-        one(tailscale_oauth_client.default[*].key),
-        one(tailscale_tailnet_key.default[*].key),
-      ),
-      null
+    authkey           = coalesce(
+      one(tailscale_oauth_client.default[*].key),
+      one(tailscale_tailnet_key.default[*].key),
     )
     exit_node_enabled = var.exit_node_enabled
     hostname          = module.this.id

variables.tf

@@ -205,10 +205,10 @@ variable "advertise_routes" {
 variable "authkey_config" {
   default = {
     "tailscale_tailnet_key" = {
-      "ephemeral": false,
-      "expiry": 7776000,
-      "preauthorized": true,
-      "reusable" = true,
+      "ephemeral"     = false,
+      "expiry"        = 7776000,
+      "preauthorized" = true,
+      "reusable"      = true,
     }
   }
 
@@ -239,20 +239,12 @@ variable "authkey_config" {
     }))
   })
 
-  validation {
-    condition = (
-      var.authkey_config.tailscale_oauth_client != null || 
-      var.authkey_config.tailscale_tailnet_key != null
-    )
-    error_message = "At least one of 'tailscale_oauth_client' or 'tailscale_tailnet_key' must be defined in authkey_config."
-  }
-
   validation {
     condition = (
       var.authkey_config.tailscale_oauth_client == null && var.authkey_config.tailscale_tailnet_key != null || 
       var.authkey_config.tailscale_oauth_client != null && var.authkey_config.tailscale_tailnet_key == null
     )
-    error_message = "Only one of 'tailscale_oauth_client' or 'tailscale_tailnet_key' must be defined in authkey_config."
+    error_message = "Exactly one of 'tailscale_oauth_client' or 'tailscale_tailnet_key' must be defined in authkey_config."
   }
 
   validation {