Viktor Barzin 410c893647 fix(provision): security hardening from code review ... - Add input validation: username regex + email format check in pipeline - Quote variables in .provision-env to prevent shell injection - Remove dead source command (each Woodpecker command is separate shell) - Use jq to build JSON payloads (prevents injection via group names) - Clean up git-crypt key on failure (use ; instead of &&) - Add Kyverno ndots lifecycle ignore to webhook-handler deployment		2026-03-18 21:25:03 +00:00
..
.terraform.lock.hcl	add vaultwarden daily backup CronJob to NFS	2026-03-15 00:03:59 +00:00
backend.tf	[ci skip] Move Terraform modules into stack directories	2026-02-22 14:38:14 +00:00
main.tf	fix(provision): security hardening from code review	2026-03-18 21:25:03 +00:00
providers.tf	regenerate providers.tf: remove vault_root_token variable [ci skip]	2026-03-15 21:21:01 +00:00
secrets	[ci skip] Move Terraform modules into stack directories	2026-02-22 14:38:14 +00:00
terragrunt.hcl	migrate all secrets from SOPS to Vault KV	2026-03-14 17:15:48 +00:00
tiers.tf	[ci skip] add auto-generated tiers.tf, planning docs, and helm chart cache	2026-03-06 23:55:57 +00:00