22 lines
2.4 KiB
TOML
22 lines
2.4 KiB
TOML
#:schema https://fnox.jdx.dev/schema.json
|
|
# The DNS workflow's secrets: the Infomaniak API token (scopes dns:read dns:write) and the passphrase
|
|
# that encrypts the OpenTofu state. Recipients: Elias (macOS Keychain, service fnox-0x9497, account
|
|
# age-key) and the HEAD VPS (/etc/head-vps/age.key), which runs the workflow.
|
|
#
|
|
# printf %s "$TOKEN" | fnox set INFOMANIAK_TOKEN (or no pipe, for a hidden prompt)
|
|
default_provider = "age"
|
|
root = true
|
|
env = "exec"
|
|
|
|
[providers.keychain]
|
|
type = "keychain"
|
|
service = "fnox-0x9497"
|
|
|
|
[providers.age]
|
|
type = "age"
|
|
identity = { provider = "keychain", value = "age-key" }
|
|
recipients = ["age135dmd38tuyguzg2kx3smu0s5degx0t9k4nnnn6qdfkc5vjqz7cfqm0ed8s", "age1m2l2mqucf7y0nwl32lrn9pe6cel4hppn0j8qgdfx7wd0jndpwqpqmgljhg"]
|
|
|
|
[secrets]
|
|
TF_VAR_state_passphrase= { provider = "age", value = "fnox-age-batch-v1:YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmRXJmb3hrOUtkK2Rjc2tEekxYWkpCaGlZZFBXN1RDUTUzazI5MlE3eW5RCmpuUDg1SzBkQ1RwMUFhT0NwSUQ5QWc2ZXovWndKckM5WXdmTjVNd0I2U28KLT4gWDI1NTE5IDB0dko0ZGtNZFN6bVZJQ2Y4ajAwZGM5VTZQcjJ2T0NrTnQ4TmNWZnJMQkEKVGJ5WkNsdXZISjVtVEhlckxtT0lRSlZkT0tzT1c2SThvOU9rdG9BZTBwawotPiA+MmdiZy1ncmVhc2UgJUpfP2gkXDAKcmg0RFRrZndtODdWQ3A3djdPQWNTYmZ5ZGlyWFA0UU45L2dvUnJvUzVGVC90Z0IxOVU0eVEvMmcwTkl6RDdwaQpJYWhwUHFrcDJCLzN6Vm5NcHRNZ2NKNHk3RmRZeUEKLS0tIFRmR0s1emRDRUNPZnFrUHJodk02TjZ0NFhiYS9ia1I5NE5BVXg2RTAvaWsK2EKpQIbNU4bRqR0K5v3Bgv+hH+428DDdEMV66DvwjxdSFi3A7biOGkwVPQEiSj+4rZvg5rH2zMdLf/ePDfJHWtuBCdVhMY288G4JtQ==:Zd3C19wR42BYxSNhKQYMpGnGubnycQn40oiyZM0GnT0tk63aaluPcz+YllQ3zdseUWm0vl2qxU+k+iwaoVFZu34pzR/0U3Lc", env = "exec" }
|
|
INFOMANIAK_TOKEN= { provider = "age", value = "fnox-age-batch-v1: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:m2TkcBTgrkfaK53daDDmULYz4RgphubbFrFmd2r4V63VAAFApNEA6FDlmWE0M4oFX42/p3YY7IotzyIOu5ZMXAF2o6boJ4Rb50K7DKs7jJkN8xMWVYHrvRC/ARa5xVC0hAWHJRw4l/oDSpQ0", env = "exec" }
|