diff --git a/.gitignore b/.gitignore
index 1f179f4..5b6490f 100644
--- a/.gitignore
+++ b/.gitignore
@@ -102,3 +102,4 @@ packer_cache/
 kubeconfig*
 tofu/oci/terraform.tfvars
 tofu/oci/terraform.tfvars.example
+tofu/**/*.backup
diff --git a/tofu/oci/terraform.tfvars b/tofu/oci/terraform.tfvars
index d3aba02..98b1cf6 100644
--- a/tofu/oci/terraform.tfvars
+++ b/tofu/oci/terraform.tfvars
@@ -2,7 +2,15 @@ omni_ready         = true
 omni_endpoint      = "omni.wind-bearded.ts.net:8090"
 oci_config_profile = "syscode-homelab"
 
-# talos_image_ocid   — passed via CI var TALOS_IMAGE_OCID (GitHub variable)
+# 4x Ampere nodes (1 OCPU / 6 GB each = 4 OCPU / 24 GB total — full free tier)
+ampere_nodes = [
+  { name = "syscode-1", ocpus = 1, memory_gb = 6, boot_vol_gb = 50 },
+  { name = "syscode-2", ocpus = 1, memory_gb = 6, boot_vol_gb = 50 },
+  { name = "syscode-3", ocpus = 1, memory_gb = 6, boot_vol_gb = 50 },
+  { name = "syscode-4", ocpus = 1, memory_gb = 6, boot_vol_gb = 50 },
+]
+
+# talos_image_ocid   — fetched from oci-talos-gitops-apps/omni/talos-image.yaml in CI
 # omni_join_token    — passed via CI secret OMNI_JOIN_TOKEN
 # tailscale_auth_key — passed via CI secret TAILSCALE_AUTH_KEY
 # tenancy_ocid       — passed via CI secret OCI_TENANCY_OCID