RWejlgaard/pez-infra
1
0
Fork 0
mirror of https://github.com/RWejlgaard/pez-infra.git synced 2026-09-02 00:15:35 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Update README.md
Some checks failed
Terraform / Plan (push) Has been cancelled
Details
Terraform / Apply (push) Has been cancelled
Details

Browse source
This commit is contained in:
Rasmus Wejlgaard 2026-07-23 20:43:17 +02:00 • committed by GitHub
parent f30c7f50c3
commit 54634f7e15
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 0 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
terraform/README.md
View file

@ -12,8 +12,6 @@ Infrastructure-as-code for cloud and edge services. Uses [OpenTofu](https://open
Secrets are stored encrypted in `secrets.enc.yaml` via [SOPS](https://github.com/getsops/sops) and decrypted at plan/apply time into `secrets.yaml`. The Makefile handles decryption automatically.
Required secret keys: `hetzner_token`, `grafana_cloud_access_policy`, `grafana_synthetic_monitoring_access_token`, `grafana_fleet_management_auth`, `grafana_service_account_token`, `pagerduty_token`, `plex_token`, `backblaze_keyID`, `backblaze_applicationKey`.
## State
State is stored in a Backblaze B2 bucket (`pez-infra-tfstate`) using an S3-compatible backend. Credentials are read from `AWS_ACCESS_KEY_ID` / `AWS_SECRET_ACCESS_KEY` environment variables — the Makefile exports them from the `backblaze_keyID` / `backblaze_applicationKey` secrets automatically.