state: add SOPS-encrypted terraform state to git

Browse source

- SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted)
- scripts/state-sync: encrypt/decrypt/commit wrapper
- scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy
- terragrunt.hcl: -backup=- prevents backup file accumulation
- .gitignore: track .tfstate.enc, ignore plaintext .tfstate
- Cleaned 964MB of stale backups (state/backups/, .backup files)

...

This commit is contained in:

Viktor Barzin 2026-03-17 22:37:56 +00:00 • committed by Viktor Barzin

parent 7ec627f365

commit 3583994efe

106 changed files with 279468 additions and 6 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

1316

state/stacks/webhook_handler/terraform.tfstate.enc Normal file

View file

File diff suppressed because it is too large Load diff