@varun So the way we specify these variables in terraform is in the terraform.tfvars file. I made it so that all you had to do was include a single value for both the identity and tunnelbroker addresses to make it easier for the user:

identity_socket_address    = "https://identity.commtechnologies.org:50054"
tunnelbroker_url           = "wss://tunnelbroker.commtechnologies.org:51001"

I'm realizing, however, that if we were to ever change the type of the json in COMM_JSONCONFIG_secrets_identity_service_config and COMM_JSONCONFIG_facts_tunnelbroker, this would break our self-host config, hence why we likely configure the actual environmental variables (and their files) as the full JSON

Do you think we need to make the same change here, or do we not expect to change these json types

I've decided on having users inputing the json themselves. This pairs well with my new approach of using terraform.tfvars.json instead of terraform.tfvars as now the entire configuration is json