Viktor Barzin 0d8e3484be [ci skip] phase 2: split terraform.tfvars into config.tfvars + secrets.sops.json ...

config.tfvars (29 vars, plaintext): hostnames, IPs, DNS records, IDs
secrets.sops.json (140 vars, SOPS-encrypted): passwords, tokens, keys, maps

Both files coexist with terraform.tfvars — no functional change yet.
Complex types preserved: maps (mailserver_accounts, k8s_users, homepage_credentials),
lists (xray_reality_clients), heredocs as \n-escaped JSON strings (SSH keys,
WireGuard conf, headscale config).

2026-03-07 14:04:40 +00:00

8.5 KiB

Raw History

View raw