diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..3906290
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,36 @@
+# Local .terraform directories
+**/.terraform/*
+
+# .tfstate files
+*.tfstate
+*.tfstate.*
+
+# Crash log files
+crash.log
+crash.*.log
+
+# Exclude all .tfvars files, which are likely to contain sensitive data, such as
+# password, private keys, and other secrets. These should not be part of version 
+# control as they are data points which are potentially sensitive and subject 
+# to change depending on the environment.
+*.tfvars
+*.tfvars.json
+
+# Ignore override files as they are usually used to override resources locally and so
+# are not checked in
+override.tf
+override.tf.json
+*_override.tf
+*_override.tf.json
+
+# Include override files you do wish to add to version control using negated pattern
+# !example_override.tf
+
+# Include tfplan files to ignore the plan output of command: terraform plan -out=tfplan
+# example: *tfplan*
+
+# Ignore CLI configuration files
+.terraformrc
+terraform.rc
+.terraform.lock.hcl
+*.tfbackend
diff --git a/debian/main.tf b/debian/main.tf
index 4a3295a..96f513c 100644
--- a/debian/main.tf
+++ b/debian/main.tf
@@ -22,4 +22,5 @@ module "tf_debian_vm" {
   cloudinit_pool        = coalesce(var.cloudinit_pool, module.invariants.cloudinit_pool)
   bridge_name           = coalesce(var.bridge_name, module.invariants.bridge_name)
   ca_host               = coalesce(var.ca_host, module.invariants.ca_host)
+  memory                = coalesce(var.memory, 1024)
 }
diff --git a/debian/variables.tf b/debian/variables.tf
index 10b6b97..ebaeee9 100644
--- a/debian/variables.tf
+++ b/debian/variables.tf
@@ -46,3 +46,8 @@ variable "ca_host" {
   type    = string
   default = null
 }
+
+variable "memory" {
+  type    = number
+  default = null
+}