htpasswd.tf

variable "users" {
  type    = list(string)
  default = ["bob"]
}

resource "random_password" "passwords" {
  for_each = toset(var.users)
  length   = 32
  special  = false
}

locals {
  lines = [
    for user in var.users :
    "${user}:${nonsensitive(bcrypt(random_password.passwords[user].result))}"
  ]
  htpasswd = join("\n", local.lines)
}

output "htpasswd" {
  value = local.htpasswd
}

output "passwords" {
  sensitive = true
  value     = random_password.passwords
}