infrastructure/justfile
Tine ed3526a5c8
Some checks are pending
/ lint (push) Waiting to run
feat: add encrypted state
2024-12-23 17:36:42 +01:00

53 lines
1 KiB
Makefile

# Always use devbox environment to run commands.
set shell := ["devbox", "run"]
# Load dotenv
set dotenv-load
mod k8s 'k8s.tjo.cloud'
mod network 'network.tjo.cloud'
mod ingress 'ingress.tjo.cloud'
dot-env-encrypt:
sops \
--encrypt \
--input-type=dotenv \
--output-type=dotenv \
.env > .env.encrypted
dot-env-decrypt:
sops \
--decrypt \
--input-type=dotenv \
--output-type=dotenv \
.env.encrypted > .env
tofu-state-encrypt:
#!/bin/bash
for file in $(find -name tofu.tfstate -o -name terraform.tfstate)
do
echo "Encrypting $file"
sops \
--encrypt \
--input-type=json \
--output-type=json \
$file > ${file}.encrypted
done
tofu-state-decrypt:
#!/bin/bash
for file in $(find -name tofu.tfstate.encrypted -o -name terraform.tfstate.encrypted)
do
echo "Decrypting $file"
sops \
--decrypt \
--input-type=json \
--output-type=json \
$file > ${file%.encrypted}
done
default:
@just --list
lint:
@tofu fmt -check -recursive .
@tflint --recursive