viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
infra/state/stacks/iscsi-csi/terraform.tfstate.enc

240 lines
104 KiB
Text
Raw Normal View History

state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"version": "ENC[AES256_GCM,data:yA==,iv:r3HrNZnb9zR7MUiVa5uLuuu5mr82P7fPZXTPNehsNws=,tag:GYQFrbADrU7TPgnOSCZgig==,type:float]",
"terraform_version": "ENC[AES256_GCM,data:bEULRdc=,iv:n9Up4TNgsLfnlVNxnjXapZ8DmlubQ4QycsqJlqwtpfM=,tag:oROv/x4kDnCJrydWbg7BTw==,type:str]",
"serial": "ENC[AES256_GCM,data:Yw==,iv:vdoMqDlwi4WE6vLGgu7LEToH/EUvmF+dWVin/bfL1ws=,tag:TpSqU+pMv2tVbuFSL7RZIg==,type:float]",
"lineage": "ENC[AES256_GCM,data:9jq48+G+LP6nMESxiZoSPdHnEajVHz17K03IoQ4BSOoUxxU6,iv:ny9Me9SeQqDKoPd4qYFWDVV06ulX76eQy5AJlryGs4Q=,tag:bTD/UkkWnRCey0o37+iX8w==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"outputs": {},
"resources": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"mode": "ENC[AES256_GCM,data:bR8vOQ==,iv:LG1V7G9kXja0yjGM8cA/fOmcqTOm12v9xef5Rvib72c=,tag:FNi8E+YdWrq5VamcHdKKQQ==,type:str]",
"type": "ENC[AES256_GCM,data:9hlYrWbWP0IKCqGgpCYkAtYy,iv:tdAKTSAWYYIiPtOiqwx4zLdLcnPm6rP5Zvg/JXgBvMA=,tag:m77OHOQRP0Hh3lCVqsoy5Q==,type:str]",
"name": "ENC[AES256_GCM,data:KFrDm4gL3A==,iv:iO9WUt1VGAvtBwoG/LbBYXZBGaXoXqAuLU3htDrnflw=,tag:kf/RdKPeEfNBXHC/Rf+46g==,type:str]",
"provider": "ENC[AES256_GCM,data:xnLnKEVriVu8ko1vSGCN9vx/8NUcHhce9xAqqZKwGwZqf9u7XxSCP2aKNkGy/pzQZw==,iv:G+pAQHAOVLvckzHcmK14f3/rp/wRTNQ7ckLS1Y76xkg=,tag:oXW94auJdkA0vu5P418+/g==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:dA==,iv:EEphsmBCpJuaJ45hkjSxeaKcAUO0K38zhU9VaN2L7XU=,tag:rRyLxQa5A93q1U6rTUWuvQ==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"created_time": "ENC[AES256_GCM,data:t+hLHSSoRs+DTuvCs1DT9osVU0W46QWpsgyNe5UP,iv:UUI5CHiBt4k5IdLTM3bj9coTfie1g6yjwFTcKv2/+R0=,tag:PlaLULy9EUA2rSxGWYJRew==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"custom_metadata": null,
"data": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"alertmanager_account_password": "ENC[AES256_GCM,data:9RyaTxXK+QMxQH5xCoBw3wjbWXk=,iv:iACtKnEXJMsSfqohY9yEsP0129gib77EkGBxHdtOvjI=,tag:xXv2uldUKp5fdoqCdIj0IA==,type:str]",
"alertmanager_slack_api_url": "ENC[AES256_GCM,data:s48TCC0hvDeOY66tthNSNpHQpPMkZ/KCoWbufmXCP2eG92Eg14lhB5VkV8+/K83xK3+lhuKFr79hfz8QUHyjpIYYW0yPRbC/g3NmNPlhJ676,iv:zAnuox0gZMiE10WLl3Jxx7uIdMFU13wfB8zsysVbeZo=,tag:C5clSv48oRPKZwI9ZaIx2Q==,type:str]",
"auth_fallback_htpasswd": "ENC[AES256_GCM,data:O71RLxEudD8h1Z4pigYMr78BST/572lTcDrXSgEDuHkz25se5pM+2o+xKk23B0MyXj0wanlq0wHg1qkd5/p4MEHa,iv:rEgKZYuSI/+Rj+qvvGC3B71/gYA2IGKPIg3+TsQ9y58=,tag:Ly2xZgc++3nUWHMGd5F6Ew==,type:str]",
"authentik_postgres_password": "ENC[AES256_GCM,data:Rz1n5Xlkp3G0XLtiSBPvJg==,iv:jV3y2jhYH7x1Bwk0qV3hGSirtKgfNiPvmd3aE+9h1s4=,tag:PElvvC5dy+mJ72eMhChqgQ==,type:str]",
"authentik_secret_key": "ENC[AES256_GCM,data:XRfdAYvaXgnZo8FqRYhGHGErd59ZRBCC0wk8CDEg4C5hG86Jm7HM5sAmIFoLdKcyRYE8,iv:yaA5g9byHutQTTULmmVR1kjcVwXo/ENn2TOtANeAJUg=,tag:KEyjs1FgqOTuK/UkFazedQ==,type:str]",
"cloudflare_api_key": "ENC[AES256_GCM,data:f8napwCgf+Lp5tgVL0DTvfNYksIcnNeLBcNUa8gA959kZmqVtw==,iv:vuntNQHO9fprjE/f+VXngwGYuXsv+ky+FHvlD1keivU=,tag:4KHtLLOSsoE6sIyFLNPuDg==,type:str]",
"cloudflare_tunnel_token": "ENC[AES256_GCM,data:0qkAVJRbP4aEpp86/PHROIa5E76dEOAJhJkEt25KXoitqn/Ntdv0kN7g926BNimSrrSbqQ0yu2crUbwjHuCjUh2Gs9ZLBM3G/P1aUt4zmslpQQot92YjEyPibrE8Pol15RAZC3ykslUfiuvoM/yTC3QL4Ab8cUYiXOkAmENKC3VAgvwvopbXWenax+4GvIDlGSgsYrfxPR97D1T0Yb/ObDvZRkRXUq2iTtWvGM58+fzI18fCMGvXvw==,iv:VWU0jof6gaaxqWUWB563wqIrLnNiY4RrMzW3TQsE5rs=,tag:LGyObOtelqDD92nveMpwMQ==,type:str]",
"crowdsec_dash_api_key": "ENC[AES256_GCM,data:oxx5E3gAJE0z9Ep7OqVRhS1Ccn/1HrjqhyuwOuVaTH3P24pxZjGTPa18aA==,iv:Ph7/9qItOsgA4T/srikuQO5xAam0EUgUX1IHLf9XcE4=,tag:ETgjqnh/eI6dR4OlIHzGBQ==,type:str]",
"crowdsec_dash_machine_id": "ENC[AES256_GCM,data:EIuy3rPupHRzdmQ/5GrtqxKPN6X/c4y/dY30hHI=,iv:8ho2I/SjhO7jJFWIkX/v/HnCc7jix1wzKX8vTdMHVQM=,tag:UKHaJgGiYNkgWZPjGAEt0Q==,type:str]",
"crowdsec_dash_machine_password": "ENC[AES256_GCM,data:9dBuR4jsp7gbN6ZgbOtH4esaSsz1VTIkpZzAgeNKEYAMnCZnBaJ4vQhxbEn7uYbS5sYIlqu0QSsxdQLSwCO68Q==,iv:HrgynKhyC+DJ3bHSmt0zluhOsz/t30/NbYIimFxqkms=,tag:OUEr+WSXac8kqJ6wMLcEkA==,type:str]",
"crowdsec_db_password": "ENC[AES256_GCM,data:LWzDGAU/7eyFfv8C6Os=,iv:pJuzK6wGXpnnzR67i7fCh1ZvXJlaxiSDky/1wM4yPgQ=,tag:pDRszoxvOcH0miRLzoCcMw==,type:str]",
"crowdsec_enroll_key": "ENC[AES256_GCM,data:JxvicrLbV6B0DEky6FfpWpykp3sTyjUNow==,iv:QRtwIHGIJECAf+xcixBVNeKtszq2nnE41cnjBNwQkIU=,tag:XjMruKAF8SstFqW/UqLESQ==,type:str]",
"dbaas_pgadmin_password": "ENC[AES256_GCM,data:qn93Vpjy6PnCDSetIg959rKriVEmiCCuk6m4vxu9SPo=,iv:oa+J6RuZUFCfxnetWbmOHlJfSnK7ZTMkWLfXEj5w4Og=,tag:DqrieYO887IR8GRJsxB81g==,type:str]",
"dbaas_postgresql_root_password": "ENC[AES256_GCM,data:JDXkCBr0R4YyRIpoZoIhRfP1IhGcWUb3vwc=,iv:3aVnWeuCEUYgwW2Vq7c5OQ8JCjKHgwLAszBqos65hN4=,tag:COfA2pqCKSvQDSWACOxqtA==,type:str]",
"dbaas_root_password": "ENC[AES256_GCM,data:L8ch1mOtNLSNC/kVnO6wefTGS2zTO27XB7PPOw==,iv:3QveE+mTfAntVKkwMa04NUvk3nBeaifzit4Ql25paNc=,tag:cLaV+WqR/ymHj3QDn8wjpQ==,type:str]",
"grafana_admin_password": "ENC[AES256_GCM,data:b/19bTihjV2Rg+hTRiGgxP5dKUk=,iv:PzbZFkN9ufYPpsItohKBvQWhDgqg6covNiD8ZsepBEw=,tag:7VSEosHvDJ5KkUygfYYjZw==,type:str]",
"grafana_db_password": "ENC[AES256_GCM,data:fO5rOBIzAe82ZUc+XxMrpjWiUfKR,iv:G0VBuqpmegTeZrbmf0C3oeh15Ug3iOAH/ooL0XUmljo=,tag:pYOI4fEbD8NCIKIFy/kMZA==,type:str]",
"haos_api_token": "ENC[AES256_GCM,data:8gy7ikwaawzfk2LS/n3jzXSxhZOaqtP6RaHalSRt8akvYrCRQlcolbdK9qKpXPN0J+uHMXVGa2XXNjphHptLxn34ktkTIt1dkZbktp/w3YgoP2s+9en7DHUADnzbBG78ue5531XcywLu6Ygxjpeg6DNuJ7aCi+77XDWDuDVSQxLvBHWqhR80cxpkuG6BRqIoO45Ecp+aE2jgPf9TdRzAPMaK4ENorJK0j8Gn0gK0Tr5aVV75KsXO,iv:nt9LY07F0PXQ5Ag0H0LgxaGCRgiRfjPRE7Ul7qiD3FA=,tag:BYBceruPglwfiC8bepTXuQ==,type:str]",
"headscale_acl": "ENC[AES256_GCM,data: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
"headscale_config": "ENC[AES256_GCM,data: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
"homepage_credentials": "ENC[AES256_GCM,data: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,iv:067cM1yW+E4NlJJCFICpcTEHeSQwgW1KYrJRIk1kLf0=,tag:9zvl3UgPkifA8R7EHWKS6Q==,type:str]",
"ingress_crowdsec_api_key": "ENC[AES256_GCM,data:np3Eqh+NKehs7UeFaJAgMFg7I8XCkg8jkp2BNyiRbthtBb3dKBL6OlbqWg==,iv:G6b2m4jJ41g5esvBI4fbG+06V9R/3P/OKmQIgJAxaKI=,tag:NfEuy3xKF66Ru+pHxtxsQg==,type:str]",
"k8s_users": "ENC[AES256_GCM,data:AgnMZ7LhXfhCQFgmwOiKv2HvyQvogNXpBngCzkEEv+T2WmgW3mtBcSA/AyjpCKOUUUPOU2Oz06TsyDxWj4sRKEidZ3c/pwS1YEZzMsmLTdH3pcbLwHbup1qXbqLwIXvI+D49bZbn3EGpqvB7RG/C3R3oyCkc/0fhXV/8FDnio/Xo8IsO3qUlGSG9ysXKmBUyYGlPSlaUydoQzqpRQWEyvsB1d21d8/vaH/HzR7M=,iv:Qaf6fp4LsABlccAgeXBZjnVqH3eQhvQVteTUvszQC8k=,tag:x1KYUmN5DB6WPCTL9DSCsQ==,type:str]",
"mailserver_accounts": "ENC[AES256_GCM,data:DzWe/iw4ZOgwbotGkyj+cYeySlhqUEnjaJ3+t1XHNZ+dQmDTjz3omD/fAfyh+/EloZDMNCBkrvjxXT0Nnoxc5bRL6cgCHY8DqtfhErFpzXOrZ7XTKpL1O7vBMzscdqU59AwKNlsHYWYqLKZcCt06tbaS2g1v6UtJ7/zmtpdyJEMp0DH4qegRvc7CP89ga5cukn+GjSkTRVEXTxK0A+ilkFxD4BszMHSa6Bau9dLwgoSAzp7CWJ4Cwa54dMTc7Oo/pi7MgQibz4XoGE8dgK/huFjZZSs/M7dMht0u5Irc1x7GbkdlW0uhDILNK9tiv7I7phUbJlzvN/1sSoapl/+pmY0vO75Ud3kATSKYwgI/B6a69DaApNVyXZI5XPyEPrZ85gK3n+WIP9VU2TKla0YAkTKzZudzgaY9/DrxNmgM/qIvqaRJQc0e2H/okMPWjzkwPfepVia22SULLFALwLI2Ysq2sP+2g4mK4WSp+foJElOAdYp7jBNyyBziGO3EGa/ldzI2xiTX/tDbIdryL7mFjXGDwjPRveiFuIRuX0kjcZsdlwyooqAZjkGjeCeIV3NreEN5JXwKV+rhtPGMmcnwrSNCknnNyDUPoJ6lp5uoenkHSvFCSNGklgb7iqEvI9ZlqP8iTd0lqJtFT2aZvhlwCM8WLc7lnO3CM+sKduQho0hBnXv3RJ5R02eW3DRy08mpo7AqH1/MZwhX7EnpA9AAcwYlK39yrRffCm2FJiP0Lj8XQnR74WJAFg1PpB9iP2Wd6xg4jtWFB/KeN5NRTzsOefdWmT/l0S3M7tCyR6iJ7dOoX9P8qZkTu+KMgXv3KHs2/FbL179Gfz4JvYXw90C07wzC1g+J2YCfRFwGYfXTwx9OPlFBYv5CaiVde47peXbSDIUyQccaPoeZu7mcwzD6,iv:dDJivFdxagNixpsv8lpnJL++o7AOSv03clscKsfU/uU=,tag:JzEay4Xh2UiHE/w7gZT9AA==,type:str]",
"mailserver_aliases": "ENC[AES256_GCM,data:tc67dkFDnqgLLqDsIFp9XOwB9YyEpRRCvUYr1jjxKaP+c/HUSXMXJNBIL/8WYtxvjUYBFff0CKEEvBhd+Xoa9oWFU/muJwnwgnXZ1CH3VM4hlfMuxg3ByCHFQXUcXQ6b7738hNQ6tJTQ8EQgY+m0e+RyITosMtOWNNcxXEbIj1nUMZwP6wTj1V7x4ZTRcp+g7TmtAmXgF6s0Zdom8Wakqd6gmtU1uugu95XeF3UQ2wBH4mqcLlcdF8Vpn+7rsLdNmtgHObjGONl9bCxYvh7TW1UhShdvrWE41E+gTfJI0ZXMGNZKAqmfFfJLIJB2ioGzy2CXJIVJC6MZ2WDuHpbd880TrqpPjBa0p+fQBKMOWHVY+cCMBAwt4wWoGKJyaSdCFz7xSGJF+K9eGQOTGwhqhtQxODFseiHb/iq4PKLkVMb7CCjgIUsHTuol9sBk2Z0gJ8n/clXFj3/fYVmv3xjEbv5wewfXfHz0kTMLi9piWO+SsnSQiB7RUeO2WfXwemDUDXQk3EdQV6o/z2l6WJlAtKbiR4FFvU3fhzqA0n5P2Fv4a3O7EQpPM5Uo9Jnn3QFRzbSZNlg+s57mzXxkV3sk1agaxj/8,iv:K9E54g50iU9KXDSN0/vpS8NpUA7YV0dWcRJHLvDVGE8=,tag:u0Kr3Og72HGeuXyK8JwcDA==,type:str]",
"mailserver_opendkim_key": "ENC[AES256_GCM,data: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,iv:URy7CkyIDWd6tEVcKCsBt3x11BDPLy8ZFyI75QXmpPg=,tag:cCjqb9d8o+lUuEv1yeJn/A==,type:str]",
"mailserver_roundcubemail_db_password": "ENC[AES256_GCM,data:eZ0HNBNyqMMIhW4ILIo=,iv:ktbmBettWiDqHQYIH9Fj4nx02nwMAT5myZW72ECEHP0=,tag:UWNpkytIIIgzEgBIIZsE8Q==,type:str]",
"mailserver_sasl_passwd": "ENC[AES256_GCM,data:4ULtOTwXdw9o3vBnR3nXMNueGtGaMKOVLB4xIWr4rmi2D1ruUF52Qtt0MqdWsRi+eIM/YE0asyIcB8PqPjkevC4eteDlHKyghObpSHUGwNf00xOd9+p/qjz64wZ1yeAaxHxK,iv:nKrT6d56wuZlaasmZu2aEB6Ldf3B3F1PZqbyPqC6iRs=,tag:cBeHn3W7MfJz9i+Asy/i0g==,type:str]",
"monitoring_idrac_password": "ENC[AES256_GCM,data:u7P8/uJR,iv:tJXDi1hDK8J6rVwaOOszCqscE78Z3icj9rUJx2G0hU0=,tag:2Dy83JvTZi+uuCeXx9qpkA==,type:str]",
"pve_password": "ENC[AES256_GCM,data:xRBKptqVDnvOZMR2BqJCF6mx8VG2rGmhjvskKA==,iv:VjOt4OEvyvwU3gJ+O/Mw6Owk933txUuAvTQVuqzwZ6k=,tag:gAYkmfc3rPYewbHgTGrN6w==,type:str]",
"technitium_db_password": "ENC[AES256_GCM,data:xT5zKm1J08j9dtOMWdw=,iv:96XBiWdt3zm2in5bOfboqXfv7iFB72afnSbMxZBFtgI=,tag:TDdI7UoldvOt8A/krDyFkQ==,type:str]",
"technitium_password": "ENC[AES256_GCM,data:Zp0TKWJjHBB3A0E4X5yXs2HAemiBQK4=,iv:eyLFrckt1SsUbIdWC6EkxON5LnmWWipyqNxZ40JB8HE=,tag:/Y5Ieck9MYWuMOVpDsKdqw==,type:str]",
"technitium_username": "ENC[AES256_GCM,data:peVj4VI=,iv:0LVIQlgKvBZCxqZ9BJ60trUorTuUHR19UA6tLO3e2E4=,tag:SWHai4ErAzK80wSu2LCnVw==,type:str]",
"tiny_tuya_service_secret": "ENC[AES256_GCM,data:jzzdVD+VEKpywoXUht6fFgiI+gF7Gw==,iv:pF6y+azx20JfTGVyu0IGQkInYPJEmhkpSJEkL8ehc10=,tag:S25FVCddVAYKBbKtbSGf0g==,type:str]",
"truenas_api_key": "ENC[AES256_GCM,data:mUjrHP/6izhW/tnx5s5hA0E3pfi5BqgVD0EUL1YmUQvJcbBZGTq4CGiBwTKaENfIOxsQ4o2wg32ShvUOZusy4g/2,iv:cj22FWuhkTFVkdZ/uHGv7+PLFootowfMJcdOmWsO4dU=,tag:kxdnh/aslKzlVNyYjl2Z2A==,type:str]",
"truenas_ssh_private_key": "ENC[AES256_GCM,data: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,iv:sOH99rv+xiI4EOhAeJ4R6Dp5dgJ/CER5SmGAVtq+UEY=,tag:tX4NmnC8OcZY8PNRctBJMA==,type:str]",
"vaultwarden_smtp_password": "ENC[AES256_GCM,data:xK1d2S2rPpSVJZJ2kjI8Fu7ACwU=,iv:W4acDQka8CP6C0ReZSDit2GB7i1Vr+XVPH61AtJzkmM=,tag:B2LiL5+/7zuGP2I1+PmzDQ==,type:str]",
"webhook_handler_git_token": "ENC[AES256_GCM,data:bvmD03XU9WsU0U92K3Jz5afY3G9kgukqY9xnPBEdJC/mKMrWeEJ9aQ==,iv:KiLhs1vojw5tDKrfa3gWQrE+723j31pum4A5EIXpFZg=,tag:poPoqC3RtgtfrSSRbDPd6g==,type:str]",
"webhook_handler_git_user": "ENC[AES256_GCM,data:bGoMj5aQnrTz72Cq,iv:4X8LixuR5bOjnesk6/9wNvQFYQom/7ccxNZ9TyTnSgk=,tag:om5ltrrBilk4fJm2XJW2SA==,type:str]",
"wireguard_firewall_sh": "ENC[AES256_GCM,data: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,iv:EhiWrZBsyFoBspi7jGG4fWB6KzECxFd0mOpueTMsrjs=,tag:dHj7Nw2BPPO6WAiKbr/2zg==,type:str]",
"wireguard_wg_0_conf": "ENC[AES256_GCM,data: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,iv:Oq6ewzG9PGh8akT7gRZl2xyYuf1SeiM4vE4D7XfSXZA=,tag:xGTpJe1HPlm43/s9h92LnQ==,type:str]",
"wireguard_wg_0_key": "ENC[AES256_GCM,data:2jQAGYWi2y3/Wx82a6trS4HtHrDlkW3fgSucHJMZj+V8i7zTtCtedQPFblg=,iv:0xhQmjR2l7NwT8urvPsJV0SBdr0heSW9gbyTv0YzAtM=,tag:sID7Eb3i5AWZgJp1+tzfSg==,type:str]",
"xray_reality_clients": "ENC[AES256_GCM,data:jnqU8Umxmc5LUAgnKM/2PxN2SqAszHVfSxVdGEVex+0CzbtYg2fjNb62XSX9TyY=,iv:k0e7vv3+sruNc1Evy7bT1k3AKKYo6YC4e1asL/ZSdM0=,tag:TEZVZQg+APVqIr9lFuGiTA==,type:str]",
"xray_reality_private_key": "ENC[AES256_GCM,data:WKHywtgK2aKoIJ/d0eEPn6Fk9zYkPmPYqYgLJAq1Nkh2/F01eZfL71ed8w==,iv:5+OfW45dLrYPrEC++9cOfUHPN4Eor8J9qUoQKW/P7+0=,tag:eXS62D3ag0p1cXLdrJYuig==,type:str]",
"xray_reality_short_ids": "ENC[AES256_GCM,data:sJv4333Sobts6LbJcjo1rFcIriFUAB07B/tbcSUBxH9SIHPbxwr1U7mfqd7LZkIW5TNiVIo5Q0uACk+r6IDYx0k=,iv:5CK7l+aLWGuFdaJziyGkvnNEQFv7R2EdqD8/Dfs2wFI=,tag:9VSpEMpP4PjJ5lfOnXZ5Qw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"data_json": "ENC[AES256_GCM,data:zXDGWDLbOjFR/m6qEwJLE33tCrISSqcpQlZk9T/vEKbKfruhxYSNORWqwNI8FMnfcCsk8hM3aLsmcokMVTXNZBTotzTX3G9YWNDbrUuiJb25LDBXvMEGCXdn2tDt6rmI1HLLmG8gRaRz/TL2LxgtYTp/AJ+2R/D2IjlskUsG4lYD/tfp6NnAInJ8NdsEVGVQncmPCF80lyGxa+xV66ML6tgOzH4JudqQQM7pSVrxID0BMvT/yaLZZFwj7t/RfKb/4uQdAIPq9Ig7I/ujt0vYwQarU70+M36A0qrRukSYnYDKZnnHQFzSKSVrXaaDiOeF2M2nbEeG8+DdxWOTfWRYYLCX1uc1ZKR5cYgEgfg/AZ/hyFlOHciynaivh8xzZZ6VqEyZjju1Rn3t017jq81iJJ8ganfiSBFmvv3uJ+wDgQS0PQec5RDcT3DCF4Rh3ZCre66Yr4VNElz+ZX0H9CCcrt1iKRJVc1IM91KaJKt+jFKp97CSVR+VF2iONm8+prWuu/8ilOR4LKx8Mn7dlF4MBsWTdvlUYA23+SftlDe6KwtBddRuu1U8VCx7kuWvFEeNwPEXYlmfDGWRqG9/245qY8eVV7pmfjGE490QaDsI4OZIZee9Cq9+hBZp2jFPH/mDY+m1M7//dUqnvkCQrB+8BzHDV01DJR1MkjUYGfjbHLkosu3npZUar9PXlHq0jC5mGgwmTJYkStDOY1dLoSPxkXpiY6evLZjeMaz8bVSNqOywBvvou0A5mhAnnBPHlL0M4gUzo9qZJV+5rDzhcBFEvjrWmnZeo7/pD6IkO2+FvHSf3g3dYK5nvOIIgKCSmFHzwkYdmHEKkse+/EoxYBVRL0Gs6JLD8w4fWyJmWm7/mIip2bPypf+x9Tbg2OJyYg/1ojGzMXoHrd5dX5/nouheAhuuKxkuN+4qZSyvWpHIr52bHY4CEio/KnqM+pt4FwCkUxcZZaM1esd3UiuZGeIsWyV9WcMp9cShA6UapCWH82l6jgyYzvi2E9iNsWzxCN1qZyIDRH6+7k1r7WHdj3rR3fCrA0tmeeFSI7HmKQaolAPyQKidEi+qFD6QckS1eFRuEZgbxMmL+hinKyV+lo6QNVJ7eWSQuYs3iG2s4mMDv+En8EICYpYSjauc8EtlqLYujrZi1JBkxM8EtWI0gbwdI+cHs7dy9rUhZ8+Zrs6Hk8c6ZQQN1iApTkeHJpJlk5um+XAwrntAK/nDcAyioTazptut+VhwA31h6E7evzT7FSKGA04phlXk9EHB3ZRVs/CED5x++5WC0uVwK30M/Pp6RdKqaWNoJrqtM9cORYLXSDYjFwDJATa53X/aYmuFxaZ6jJDnUHw7igWGJuViI1kL9vrCcRmSyeF+gMObQmoglbpPfCKyNjqrEsNmAOJD9qmH/uhTd7crnQeR53Lc/0MWqTI9PNFk9VeIoExJNpQ1KFjz5zJEAJ8tKTFV4rz44v+uSYldv+ok3Aw3tR+id6drej0/j4VCxxFK4zD5Y4CWm2PLN6YwWTzNFUapLBgytLCU6ajAIHJVdegaAgDyiyODN56dWYG/NgQqBP54dqLAhoWMO/oZ5D6U9DgqHzhHPUB2A+ACr8DJOcjggc9n2fVFSzFZ3LJbKv9EN3+HJulWoVLJ5VACp3Apehb159UTNOfIjNGU/1xfHvV1ZeKm45RWyw4O95SRizQvWYvw5QLxg4vYVy7sLTgwh6YOQ2KunOLfj4cRTxf9EXU3xAUGgrj5Fx8SizrOlKSVJX2A/3pGuvTAjiQbQAl5KrH2cDVCKieIa0MqaIfgocNeKnqLZ4RLDtum8u+rhlrYm3fcjaToWBmMxVXiagelTOwBgdv7HNEzcYB/AcFdocXGikwmpNfEhvWnXCcIDSSHz4Fr05OymNV7Gd7bIPAfVJEm0wvL+76kK1lOJ8qGUw3oKQi6Fq0iQp6IKLP/h0i8/SRmECbss8INRHFVo6AYa8mtn1ICzfhq5vI1YUpTcU0VowZRt+3SUaCMdGM82Ag8JrcZrunWo9pC3DRgNZkeamqldENeCD/nEyyfSFNnoWI006OES4wJzZc1k6G3+NwY+ZyBPXVNsTxjsOhcKVZ+YQVRzhPJJ644NKgG8jaVOskFgEgDQYjgaa+GTK8ukRm+sT8uhSl8hSIQ23yRTh95LuBbcRKeWuGhR7aimqV/a7aPMLHye++1tlXGaOrzrR23Asl/TUfZlM9O+Sd77irrF+twbqMpSvkdX7x4Jew53QiY8inPoy6f7zY/OAXdQoFIjwnK7cHtHQ7Cf/qCeYGCoJSH2M3BKvi8VqK3OzSn4ylWD6S7LFfyHnxuOcdzB1gkVfl8KdNKKcprm8MQnz+XSLbReDvRlua8zh2+DRsZgEE9hevuD3aFjNQJZyzz+OUAqcnnqWVqCtiu9lcsGNH4Fb4p1OdQyMWZ4z/KoDNDphmWQcMibnbl7lxvOTOyGtZdsPdGHENJZdR8hhAK5Fm/hOjWO0c9yuQeGo0SSf849EbWdssUA1hYUxLRZj4voVXK8kU9sG+yvbm2zmbAl5SNE3aNurSYY2wMSNjkYShw+N7nzPObF82tOv98+Yd8taAra54SBs5lqnt4AcuwLxJt0Kc2jScSB1WyWC+SY5nAAMiwA3O+UqRLYKJr4TnA0dY9PSgAuUkWjRI/WSJRU7RpuC3sF6VmDJWOE7Ju6wywwEGTHQBxnLuTcE2Fa7BDahsQQOlnI8hvsm28DqZT0zEtczSfzCvcOm8Vo2DTmNTcYNl1USr2xG25yChCocZktnebC4NuBjUtIDi4lxsVMJV6fco+6Pn3/N/rrli3zzZWMKzkXmoDEMyQESey8K5l4hSjJrlGOAH4czV7fHUUaJo/zFKJ9XkHLT3NUwP8FIQyAP/TlUmmxysQhkMtgkY/JOagrFV6xwxmsrDdbYkCZztIuZ9qaRvD7zs9epBKnBIBN2LMj8Xdao4i6UYWQzORhQoZDnV7l5Fr7t/SGFH+id9+ZuYGkexyJNhZ6HOMHVR9rSvxv1E+FuMnya/+Y3kxz1uHREdbkLtIkIw4W3DOVFW22YcgNkq/5IzyOLVlWSJtbCuV7S24wnS0bcOUKmmm9zN2pkr3u7k9hB7R0IFi9/L8aEE8yqtg3PSPvtofdlv57tQLxszIIB3voSjugSYlYGcLDKxqhoi4yib2lVDe1gkD4pauyDoHSc9oDc6M/KdSIxAylcuX2MmcRMuRcWzSHuz0zj6J20be0n9z2a1T+Wf4M2SS55sQIAmMqp2+c9Ilq3mY17gBQabyPiWylc2cE/mEmQCUGadp3uqx5SaKYCxODtaWt2l7x4pSj4JMuRxUHhiooFuSKOE5msWhmdSG1fB2MHQlymsq3p1tGOXEuf9B7bztUeqboFZjuRM/k7Z5ysMf8bavxiUUzBIxMfR9y05s3cHsrcEJq5eCIQT0oXfNDq2kRIDR3jDtBNQ9NV1WXPKIHguTwCFjjEg8JrAxERCePZHxuD26ruhqLrO6fb+KZ26TOxXvv8WhuD3LIX2RRVIV8PZ9HYUSJnZ/n4kbUWC+rHNnpxZojhe5xmoIoz9bB/jlpntg4dQAMDaWRQer9etGrONTWe9c8hHKLPBPLVH5wSqDR29REN7/JRDJ/7pQm7XagOknI7ktytnq9Bu6jnQ3INKLaoF2jUdRvuz7mIDtx7ltnGUzzT31KLumjQcdcvgifGPoU7xeNTECNAWGItCORxojqNPHqy5rF3Ic34qRTgjBERbPaUpDxA/pV2iwaJNr37atizAl/zwi84kQx00vAi7XzXw52g92RVSdO7gk29/l/fIf8hVG04Hg/xXjSEc5fNGGwbP0G3/iquURXSTFgpy6fFbrBxNu55NnTKHhbeuXiwv+BP4cAg9wxaTjDINp2AEc0rdHLO9r93RzsnCwt1WVJEp/unJ7RmPkoUCZZ6ilsal3sxp6BQA/K2tAp3aQZussSZl1Gu7kGePI4Sa7lrLbS/qAGOyVrD7KxfOqWEMt5gU4mRhwa4jBxT7ebc/TItG7mbgjFkDmsE6pCVMlLIHfBcWWH71
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"deletion_time": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"destroyed": "ENC[AES256_GCM,data:chysPjs=,iv:KIWZQzRAQWbM5W7DiYiLkGh0FNLViKpKA9/JVg/Zw28=,tag:IvCem2zBgHLHrRS0HlH+5g==,type:bool]",
"id": "ENC[AES256_GCM,data:S+CgqInSk6hgnLIF2OOLWhsgYNU=,iv:45WY0iUyQzSQJpyejM3Q3It3kbIlOH7oVpYbbUVLkq0=,tag:i92uaZJ1zjAKKLcWdnKIuQ==,type:str]",
"mount": "ENC[AES256_GCM,data:BzfBYG8C,iv:Rz5IjtTxZNmQSlXZILC2Mclw3wZpStHkbP5521B1wOg=,tag:MprtVsws3NBc9jWraiByBw==,type:str]",
"name": "ENC[AES256_GCM,data:0STZXyep+8o=,iv:h/PJJfMZhdpI64jyK9tlxMtk+rmJ/bhaVlMM0QYVknI=,tag:jca5tviryyc9Vm1rz8rR9w==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"namespace": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"path": "ENC[AES256_GCM,data:IGyuqHAET1KIXsSdsPdaQlAd62Y=,iv:DVIOezEQS1tyiEk3midHTRg3pWtk8qMnPgPKxZHKir4=,tag:aY0NnCD3wCBDiGM0hcEgww==,type:str]",
"version": "ENC[AES256_GCM,data:Jw==,iv:pZzvTfP4R3eujNwvoeB3qZMJYT7JY+0g26fyadVbz+8=,tag:vg1FqWGSMKyQatV94ON5Ew==,type:float]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"sensitive_attributes": []
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"module": "ENC[AES256_GCM,data:vos5yyED7kLw54opt0kvTA==,iv:tjMVQMLpGrRB3Ex6S8foCAgh7Wf+4sr59/I4fze4Das=,tag:93/XL/aG5hCU1jtHLPUiCQ==,type:str]",
"mode": "ENC[AES256_GCM,data:XqnwX/nOcA==,iv:uxEwKIg03eqe9VjmATUBw9NQeve5goGgbwFoM4295w8=,tag:48rpKXDhzUXzIVsu//9h2g==,type:str]",
"type": "ENC[AES256_GCM,data:Ta70QljKTKj2bhdm,iv:XkU7WbxZ9/bJFsY43FfbQW40K3mMwYRmVdYkZwQfHko=,tag:Ge+ty7GdTNOZ09BRmmfIEw==,type:str]",
"name": "ENC[AES256_GCM,data:3zw6uSmvhRzECnuPAS4=,iv:TjRdDS0x6hED6WRYHS9gosCalU60Q+FEVNjWoNepnaI=,tag:5TGDRU5RNAgC+/xBTrfYmg==,type:str]",
"provider": "ENC[AES256_GCM,data:xMBCnkP9UZFRWOBw6SgyRKTqHNPd6qQojHpo8WgwRkiYVVI9OJb4zrgaND+NnDaA,iv:L3EfOY6R7ozDjHKKGA9xWbkndMh+dmhGfwnjqpo6lUA=,tag:8sD/Dso90jggGc6T1Bw3qA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:0g==,iv:PbZOmhv8AxNST1CKC6C51kJl2BKCbblB82O/kK94F2I=,tag:it1BePJktVyz5+sUelTKag==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"atomic": "ENC[AES256_GCM,data:jrVAUQ==,iv:caUMb+YkXip0o1tSsx2DqLj94VlA7mHC5Fkc0xwC21E=,tag:bXRfbiRGsJKhtfhlaPB4aw==,type:bool]",
"chart": "ENC[AES256_GCM,data:4oq7pL3aWFHK0TAQx5c=,iv:MuZCkZmK9Yq7aBEc8jPQiyuobi9gMPR20v31DKcKkeU=,tag:TFx+tst7JtGwqpDTtUkZ7w==,type:str]",
"cleanup_on_fail": "ENC[AES256_GCM,data:9Pk4xQU=,iv:Y0i+L3pDi7oX6RuN0bWb7FLcHyDddst/QHBwJYcBbQo=,tag:kdflZ5ylEndI6bLCMmQpwg==,type:bool]",
"create_namespace": "ENC[AES256_GCM,data:zlNKHzo=,iv:SeC7nww9/eXrGzwCpXH9DqKM/DkQaP+tCm6rjYd1pJ4=,tag:3rmsXSmsMSimZ+x0ea3Gdw==,type:bool]",
"dependency_update": "ENC[AES256_GCM,data:JJRGAhA=,iv:LrGM5WI6SVWBsWybeuMrISA7bSM+qu2JGK35Zu3RstI=,tag:DXVBwlNJY62dGQ49xxpRpg==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"description": null,
"devel": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"disable_crd_hooks": "ENC[AES256_GCM,data:jbqvpzM=,iv:c7/OUG62/0P/ApYJqbhoHMYtoeefAKDR9cS8md8cHCs=,tag:w8121F0cfoJ4ZegApuG/vw==,type:bool]",
"disable_openapi_validation": "ENC[AES256_GCM,data:iiAK1fc=,iv:En8fVAW6NQEabqYXbslnO1GAWxchDytehp8rP5Yb6uA=,tag:zOIUr7Xrics3fuNocfEMhA==,type:bool]",
"disable_webhooks": "ENC[AES256_GCM,data:xszyorA=,iv:D1E4CTVJjOlY6/k6YOuJk8RpBItMollKurQuarpEewY=,tag:b61vWTquR7sBmwpSM3awGw==,type:bool]",
"force_update": "ENC[AES256_GCM,data:0+poQpY=,iv:qkWglkWn66+F1qZL5yRJhI2WVTzE8SSSvUq7EHY0XhA=,tag:s1kdiYXpehpMv+b+fRjFnA==,type:bool]",
"id": "ENC[AES256_GCM,data:lwV0Bvmi7g2oFS83KvaxRph80Xg=,iv:B0N1vfJxAeRG8wvQLFdIkxZ6Ivlq3ViXEPY5dJ/LaXM=,tag:uDKG0G7gRFHiDKwaqXYp6w==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"keyring": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"lint": "ENC[AES256_GCM,data:48yE5wE=,iv:FWmOtYNn5vt0EeNjJn+B3cuhbb8cqhwC4gsYT3T4p5Y=,tag:+fvO23t6KL8K0kpxGM+mFA==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"manifest": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"max_history": "ENC[AES256_GCM,data:CA==,iv:iZoj32TJHue5EloIWR6G6PG64+QljJYdPCqncw/g0Ac=,tag:Mk4WjmAtkPgf+l3VEPHXcA==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"app_version": "ENC[AES256_GCM,data:JaWw,iv:ArT8FJhliD6t7Zo4BRbYp+hM/IBH6sUyvPvpq8mePRU=,tag:eWzBSuWrgF6pYPG6VQTgUg==,type:str]",
"chart": "ENC[AES256_GCM,data:LkVY8gjsEr/ekIaHykY=,iv:Ks1/OUxGJ8BaOAMUgVv1RkYYnDqJ1KmpiKp6meR89Fc=,tag:1u4WfWexZetTjpz71RTkeA==,type:str]",
"first_deployed": "ENC[AES256_GCM,data:5ovnPv167XY1LA==,iv:41C3i5c1FTWAKnbrvXGzPRYIlEVLOWHy2Xzr7MsnXBE=,tag:0akRtNW/lN9Ni+W95AIypw==,type:float]",
"last_deployed": "ENC[AES256_GCM,data:kOGyEgPbfWti+A==,iv:Zp3vW+/Qlafrlg4U+XkP+iyY9SmzUHSJBd3U+PHutpM=,tag:2v2oOlNxffHgdQaQIjE2TA==,type:float]",
"name": "ENC[AES256_GCM,data:PGksH3e/ukVki6LLfD0DvDJ9iAA=,iv:sOpLhZgRvuudqllSH6JfBB1P8gFaPJVi5Hbt6NkeDks=,tag:CHNWFOMS4ApKCKpu+12Zmg==,type:str]",
"namespace": "ENC[AES256_GCM,data:ER+b/fF4T8BU,iv:N8E7nUnP0mTpyA1VWz0UjEH+JCCRd6uprYaukUIIs3E=,tag:ulEvSPIz8h+Pc6ZtrgS2fg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"notes": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"revision": "ENC[AES256_GCM,data:pUM=,iv:fEh8gccjxgWJmB6yAj8SYcDgA0P5yGUhVf4TNnGKR5I=,tag:idbEKFdrAOpXVSoBcvRylg==,type:float]",
"values": "ENC[AES256_GCM,data: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,iv:wavphKxDpx7I+bWteYzRtTjEsW2qOYPaiW8yite2eMk=,tag:ECSYPazaPRo9ynMYgcXspQ==,type:str]",
"version": "ENC[AES256_GCM,data:uglmOEFv,iv:7E0VXlU5/V30qcceVENmUklIPRk12/q1bzs8J6qkm2Q=,tag:RHKWagTZR/TFAOk0nscmXA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:xqOsX3DGP9QIrIxJcXw4Iu1anoA=,iv:FQFOjxN+gUBz5SOPY6RK6I2LtWSOtSEbPvmVMCyMYWU=,tag:MBUWfm4gINBl7tphm5V+SA==,type:str]",
"namespace": "ENC[AES256_GCM,data:+oOpVQagxdBm,iv:bbe1PbIj60m6hWpYUleqb9v5Vopl3zm+36xY7GoFXio=,tag:31hEe/hVzBTo1kmtyPzmDw==,type:str]",
"pass_credentials": "ENC[AES256_GCM,data:nUXoFU0=,iv:SwFxD8HWZ3AgITOYv4Jbqj+CzEmA9miC3tplm7uaE3k=,tag:NdkmPzK7lP6pl+MOWFem2A==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"postrender": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"recreate_pods": "ENC[AES256_GCM,data:3/okyhU=,iv:Y+pi5JJYmbTYdN7SIY5LIj1fBdq4IonYKHQXyZm0+PQ=,tag:VXQ0bOp1kiXaKNOB3Ax3eg==,type:bool]",
"render_subchart_notes": "ENC[AES256_GCM,data:HRHEpg==,iv:J4+kbjnv3Qk8aIxFohR37l1lRVqHeyWQfyTxoaQbloc=,tag:VsvXngT8oTHyKO/rrakT3g==,type:bool]",
"replace": "ENC[AES256_GCM,data:hMvfecY=,iv:M2i78pn1ZBpyhPs6RvRxIdCElkEdGKqRYVtK2N38SOA=,tag:2evQAW8RmkExQZzyZmckxQ==,type:bool]",
"repository": "ENC[AES256_GCM,data:FmD8d5ea/uNdushgjAo9Pg4+0x35jZ/ng116Ab6N89r8LvoOecYKlg==,iv:nmaGQFBgBDnAasT7fYQibe/48ZQxeZJZxHdfLhcERLI=,tag:P1OwVxsg3U4QCp3aDPgK4A==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"repository_ca_file": null,
"repository_cert_file": null,
"repository_key_file": null,
"repository_password": null,
"repository_username": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"reset_values": "ENC[AES256_GCM,data:CJNFbcg=,iv:K0Q1zEoh4KNpsYy3zsOT5fISATUEVehdgMJ9kNdIbIo=,tag:v8DdS7VAxS69lfrURSe3dg==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"resources": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"reuse_values": "ENC[AES256_GCM,data:P5VZG28=,iv:IIN8mlWh7fCqO3I3JLHfdqknPefOyMPzq4u1tctV+iI=,tag:iM++LIqbbFgS+kPyMW2R+Q==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"set": null,
"set_list": null,
"set_sensitive": null,
"set_wo": null,
"set_wo_revision": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"skip_crds": "ENC[AES256_GCM,data:pTDVgOg=,iv:3vmFDNvzpd6SUy2VrSe7VqVYYGsK6aYZ72Ka1JH30rQ=,tag:kXqFTB5+yq6UOG3u9etfqA==,type:bool]",
"status": "ENC[AES256_GCM,data:/OKclkXIqhM=,iv:n/UYpFgirjBvi5nMD1Gop/7bdL/SzBpWFxhd/h0z8Ns=,tag:kiXm9gZB3+WNo1goGp/eNg==,type:str]",
"take_ownership": "ENC[AES256_GCM,data:juF10Mw=,iv:qnxe97dFBBLxlGheuXFrG1cg51LIjY5XlVvSOCosZ2E=,tag:tBvHiQCl//8JS3fslkrycg==,type:bool]",
"timeout": "ENC[AES256_GCM,data:SlcV,iv:gFTMS6zdQ9fQWffVpzJcW0h8RYFGtaUd8qkyAhkugPk=,tag:Ldzfmsduf3nawMTtNbHprA==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"timeouts": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"upgrade_install": "ENC[AES256_GCM,data:wuzt9TA=,iv:IYDrfBQ8MLf+9E69CsfLRx9ZDyA4TVip+8boseg2DFE=,tag:8EodshLi4HTzNFz/4fngBw==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"values": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data: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,iv:b/mKfFGLSXY92Hj6ry8V2hjEphxFDzjvaxADQKN8SKQ=,tag:gfQeBtKt5Udj4Z7R+KWQiw==,t
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"verify": "ENC[AES256_GCM,data:IIF82E4=,iv:YyY09NPyVUX2XCnwai8IPWh1LUyJlCH/hP5OvTeR9gQ=,tag:71t0llN7mSmla6R+m/OKsw==,type:bool]",
"version": "ENC[AES256_GCM,data:cXwN+VC5,iv:Xw6dcLZm46yemzdeqaT5WWybABUnF4ws76kreGcUGRY=,tag:G9lOPbAB8jbY3BjL8C0MRA==,type:str]",
"wait": "ENC[AES256_GCM,data:mSlOHQ==,iv:vqpWIg/tBDZsmdC3/APVLgLcR8qWCwCfqMWnd4s4RYA=,tag:Z76S3zesa/PPC347847B6g==,type:bool]",
"wait_for_jobs": "ENC[AES256_GCM,data:dGs4dFw=,iv:6mz1uWEzdWdv1WhYoEJCqscYRgSlS+u1PVzWuSazzL4=,tag:wL5Kv30Ph7uwA4vPsmX36g==,type:bool]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"sensitive_attributes": [
[
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:+1fabQlperc=,iv:irBs8AMbO5jnD4iH8qwQX3h7YZNuM7ffnW0FZWFwOSU=,tag:E+G3FG8N7fEr++LQUDVn3A==,type:str]",
"value": "ENC[AES256_GCM,data:uSkQ/Npe,iv:uEqf3B5058aLlxo1MAGFl0WYeatxaSalFTC2Cv21szs=,tag:nXu9LkixHNugePvl35sneg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:Ojap6y8=,iv:inkcf+vlpFYDWXXUS1VdniMKDZjGs82vkVk0+BwVZRU=,tag:eJ1g0mY+MWTD1kXK/NvOOg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"value": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"value": "ENC[AES256_GCM,data:eQ==,iv:gHPFY99xgsSvGyUhmUKONLb91BB/c4RYP9xOLU1eVuc=,tag:j5WN2xgm3cwi9JU8nofBxw==,type:float]",
"type": "ENC[AES256_GCM,data:sKaRXZcN,iv:n6m945cCN2QIVeGBiuqqbPpwEe8OdC/yMjV0+s1qjjQ=,tag:MBhKHO/E1tJB0mZyrVrkSQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
}
]
],
"dependencies": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:bytjKy5PcwpJ5AO3jknD6BvrSKsND6KQ5PTInKbIiA==,iv:p05vyiEb1UA37+iKwhQQQR0YqCcb1cvYbPn4cC6TRn8=,tag:wVbrSbpLscXipZ+NPvyJbw==,type:str]",
"ENC[AES256_GCM,data:oy/QCSa6thD4P7L4BWBMPDDTMrWbcgRtM5n+AdJwrKxEXAshlxy0aQplNzf1H44=,iv:y/n7Pi74aR7Ker7+TDaqGM45xYoAbaPMlKmzbVmZFL0=,tag:8XV0smtb11UqV7C3Xg1vxA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"module": "ENC[AES256_GCM,data:FCr4ySQJ+dks4atLa8qpCg==,iv:le2sAIxlksSGOiXSMcWsMdQ9ZYMQZ86x7SzVlnkG4No=,tag:yOCzXWOf0pMxHUBQjej91w==,type:str]",
"mode": "ENC[AES256_GCM,data:vIOGNtHQLQ==,iv:rZRf6NzyaHlAtVytN/OCdjbk6QWsbX6L7QSmD3gh64M=,tag:nwoylT6AzHcrGGLQi8pX/w==,type:str]",
"type": "ENC[AES256_GCM,data:fOQUfVVPW7wO0RhLQaVatN1nvI8=,iv:DCKVyI7xEULHpnDtV4xeGSXxD1cKqGNABb7Ty7KBHKs=,tag:NK+0jSI4FBYHgQdC/4676w==,type:str]",
"name": "ENC[AES256_GCM,data:bfIBYuWSSCm4,iv:SzTqo2Lditiv4+SWVH/DFsRBHkCEo1lXnaArNLfQ1f0=,tag:WjBJvf5Ln+Ockqmm1zegcQ==,type:str]",
"provider": "ENC[AES256_GCM,data:9otAycXXUxgw9tmoYqJ2mjDExtED8xftL6nwWwj692Kzbtl/91QYl4+1SM7V9ne+/Bem60g/,iv:akUf0yfvqL0e2SchhM6yDgQ51cTnMryofsY5lYSxnMw=,tag:c0mKTXcHI4+Wahjo61d/dQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:zw==,iv:pHarqzI+yO45xn3trW/ND/JmilUli6/yvgHBGju6qWo=,tag:043RtwwPBdACVpE/nAwgmw==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:ddn5utU7WtXI,iv:YVltMqbXAEXEhzD0Tb0hdBUWg1DP0zVEWIYif+BwQCs=,tag:rAyrnd9zzj8jDRav4JR+wg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:QQ==,iv:Lc6nilzlJY3/YhgHUYyK37OZbPNEBXhFlsYKf4ZS7T0=,tag:XY40/QFPxJ8i4ppU0Oz0RA==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"goldilocks.fairwinds.com/vpa-update-mode": "ENC[AES256_GCM,data:R5ut,iv:a7+u42b2bodmF5reBmEBSbYFEGFadta0bqP8qgC1uTk=,tag:w0Lq7SVUGjGcmdwtAiDdNA==,type:str]",
"resource-governance/custom-quota": "ENC[AES256_GCM,data:cVTdeA==,iv:IHYfPk8QSRg+gr1qDyzQ4lhY8qb4vegzYumMeOP1suw=,tag:dsNkQsMFQtzclffrZgBwQA==,type:str]",
"tier": "ENC[AES256_GCM,data:itzy+NyHwMf6,iv:U+WZ577Or4FII9ozZuVIEq7DMKtSbhzbWgn/SdNArwA=,tag:nc540v21d6wdgswRk1FyBg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:OEb6DRk3hROa,iv:4a/1yngxa2f31s3L8M01ekh4Y42eTtl23fm/hEhcKMs=,tag:cLL7AIC09pWawR/2P998ew==,type:str]",
"resource_version": "ENC[AES256_GCM,data:HicP87igx/B8,iv:p96irZaikjfpdy04v5t9isqwT5cqwkXzLBOqTWvV1uw=,tag:ST17BD/Zw8DHw05qshAl2g==,type:str]",
"uid": "ENC[AES256_GCM,data:ekyR2IW5jCTij2W7Ah4YJ2v0zz9MW8P7pw83wOXHH9VXSNCm,iv:FjExtqXMndHJdUJb0FdkfdzJJatkVb0lirYuzPTJakY=,tag:PTxqA3vH6kNNvjdMlxIiPQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"timeouts": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"wait_for_default_service_account": "ENC[AES256_GCM,data:74UiCIc=,iv:YR5SlL1pTEqbDF2mhk0zM7IP3r0FOgdFc/bzlzhd4Qc=,tag:rLYkkAPRyoaEF/WC4r0P/w==,type:bool]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"sensitive_attributes": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:QkEA83INZTvrl7kK8LgTwuAcVnj1VCxw7NwbVEr/J3+dD8BDg6I2EC9Txosv0E6S+hl5UpHX8IZOufero0ZEOs1sMbPIgdHEimocTrufY2w9yjT9EpYoew==,iv:3lg/LsFBz8PsK7Z1SJ2OltKDZkMbDvNnyYjt+4JjxCs=,tag:JOLiI+xbV5ULSgU6QTMoKw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
}
],
"check_results": null,
"sops": {
"kms": null,
"gcp_kms": null,
"azure_kv": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"hc_vault": [
{
"vault_address": "https://vault.viktorbarzin.me",
"engine_path": "transit",
"key_name": "sops-state",
"created_at": "2026-03-17T22:55:14Z",
"enc": "vault:v1:U3muQzOk46P7jDLhsXromLIvdMlGiM2behjnUpwA2Ab3NxPlQ7sDCYdGGqqaXn5AALxQVUX6gBA0cP96"
}
],
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"age": [
{
"recipient": "age1z64h9t3acsm2rr74pz7j4846kwj5tutx9sk78jqv46y8fln4vs2sy920ce",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQU1pLeS9nblRPNEtpbWEx\nMU4rZ1NhZU5MeW1DWHd0aHJldTRnTkQyUlJBCnRZeWxmSzVvVldjaDN4bENvZ1Rn\nYjJmRlZHenN3bVYwUG5BUWsrSVd1aG8KLS0tIDZxM1dZYWlrNENXVVNnV09hcUdm\nZ2pIVWVoSGNuVEtIYW84SnpEZDhIeUkK7786dKaw8qkop9yx/cUyQ+M9USgDYxi6\nSI49+sspiqkJsjMX0KpfKw5uROfjcRfBDMZSZHjaltyVAjJttLV7PA==\n-----END AGE ENCRYPTED FILE-----\n"
state: add devvm as SOPS recipient Add devvm age public key to .sops.yaml and re-encrypt all 101 state files with both laptop and devvm keys.
2026-03-17 22:41:19 +00:00
},
{
"recipient": "age1rekkad48r2wzhwqgfetw5yugu3ln3qlht4xg3txmx55tee8cveess60r90",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1S2oyREovTTJMOHZEWFNp\nZVMyK3JuMG1reGNuanptOThiZmxXV045ZjNBCnVleU92Nk1EMHNPbWpDS29ra3R0\nRWJJbU5OeC9OaW16VVI4blhrVTB4YlUKLS0tIE1SWjN4YmlXbHRhV2UrZHlEZXNK\nQ1ZxL3VnK0gycytKWGdjRzYwLzZGVU0KVzGFxL6LgQTi2LtnOKy0GrVAOHw8OCFL\n7wjGOQAW4p9VDYBPPzxuzedyXEBlK6Ja2ExTJ5yCyCaabZt6VETjkg==\n-----END AGE ENCRYPTED FILE-----\n"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"lastmodified": "2026-03-17T22:55:14Z",
"mac": "ENC[AES256_GCM,data:sdgsxb+kZX/7+YudhFJSAf9jdfvLjJhDxSfxzna3wDBHFOxkg/rijMMwehyEfhm0Zg4xtInOMJGpfKsk98I8jLYeKDu9a/IesQL07Yy6gfuWaOviofSD8D0A5vzx+EkUidsv6L36s5V40yhK/0bReXUK1LcLBc3eSi8yR2Zwki4=,iv:69fR18xoEie0brwn1cupmbdTHNng2EVWq/eqHB2ieA0=,tag:DXLv02Tetr8Lk2e+LUK28g==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"pgp": null,
"unencrypted_suffix": "_unencrypted",
"version": "3.9.4"
}
}
Reference in a new issue Copy permalink