feat: multi-site scalability, locals refactor, README

.github/workflows/apply.yml

@@ -3,10 +3,47 @@ name: Terraform Apply
 on:
   push:
     branches: [main]
+    paths:
+      - 'sites/**'
+      - 'modules/**'
+      - 'backend.hcl'
 
 jobs:
+  detect-sites:
+    runs-on: ubuntu-latest
+    outputs:
+      matrix: ${{ steps.detect.outputs.matrix }}
+      has-changes: ${{ steps.detect.outputs.has-changes }}
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 2
+
+      - id: detect
+        run: |
+          all_sites=$(find sites -maxdepth 1 -mindepth 1 -type d -exec basename {} \; | sort | jq -sRc '.')
+          if git diff HEAD~1...HEAD --name-only | grep -qE '^(modules/|backend\.hcl)'; then
+            echo "has-changes=true" >> $GITHUB_OUTPUT
+            echo "matrix={\"site\": $all_sites}" >> $GITHUB_OUTPUT
+          else
+            changed=$(git diff HEAD~1...HEAD --name-only | grep '^sites/' | cut -d/ -f2 | sort -u | jq -sRc '.')
+            if [ "$changed" = "[]" ] || [ -z "$changed" ]; then
+              echo "has-changes=false" >> $GITHUB_OUTPUT
+              echo "matrix={\"site\": []}" >> $GITHUB_OUTPUT
+            else
+              echo "has-changes=true" >> $GITHUB_OUTPUT
+              echo "matrix={\"site\": $changed}" >> $GITHUB_OUTPUT
+            fi
+          fi
+
   apply:
-    name: Terraform Apply - BCN01-LAB
+    needs: detect-sites
+    if: needs.detect-sites.outputs.has-changes == 'true'
+    strategy:
+      matrix: ${{ fromJSON(needs.detect-sites.outputs.matrix) }}
+      max-parallel: 1   # serializar applies para evitar conflictos de estado en DynamoDB
+      fail-fast: false
+    name: Terraform Apply - ${{ matrix.site }}
     runs-on: self-hosted
 
     steps:
@@ -22,8 +59,11 @@ jobs:
           terraform_version: 1.5.0
 
       - name: Terraform Init
-        working-directory: sites/BCN01-LAB
-        run: terraform init
+        working-directory: sites/${{ matrix.site }}
+        run: |
+          terraform init \
+            -backend-config=../../backend.hcl \
+            -backend-config="key=${{ matrix.site }}/terraform.tfstate"
         env:
           AWS_ACCESS_KEY_ID:        ${{ secrets.AWS_ACCESS_KEY_ID }}
           AWS_SECRET_ACCESS_KEY:    ${{ secrets.AWS_SECRET_ACCESS_KEY }}
@@ -31,7 +71,7 @@ jobs:
           MERAKI_DASHBOARD_API_KEY: ${{ secrets.MERAKI_DASHBOARD_API_KEY }}
 
       - name: Terraform Apply
-        working-directory: sites/BCN01-LAB
+        working-directory: sites/${{ matrix.site }}
         run: terraform apply -auto-approve
         env:
           AWS_ACCESS_KEY_ID:        ${{ secrets.AWS_ACCESS_KEY_ID }}
@@ -39,4 +79,4 @@ jobs:
           AWS_REGION:               us-east-1
           MERAKI_DASHBOARD_API_KEY: ${{ secrets.MERAKI_DASHBOARD_API_KEY }}
           TF_VAR_radius_secret:     ${{ secrets.RADIUS_SECRET }}
-          TF_VAR_wifi_password_psk: ${{ secrets.WIFI_PASSWORD_PSK }}
+          TF_VAR_wifi_password_psk: ${{ secrets.WIFI_PASSWORD_PSK }}