3 Commits

Include renames

Author	SHA1	Message	Date
rock	75a5961ef2	Revert "fix(secrets): populate the empty sops placeholders and drop the unused one" ... This reverts commit f6207ff2b0.	2026-10-06 10:03:09 +08:00
rock	f6207ff2b0	fix(secrets): populate the empty sops placeholders and drop the unused one	2026-10-06 10:02:45 +08:00
rock	03044614b7	chore: add encrypted backups and rotation schedule ... - database-passwords-backup.enc.yaml: SOPS-encrypted DB credentials - memory-agent-oidc.enc.yaml: SOPS-encrypted Poimen OIDC credentials - oauth2-credentials.enc.yaml: SOPS-encrypted all OAuth2 secrets (6 providers) - rotate-secrets.sh: 90-day rotation schedule (next: 2026-12-11) These files enable full credential recovery and rotation management. All SOPS-encrypted with cluster key for in-cluster decryption only. Manual decryption requires ~/.sops.yaml configuration + GPG key.	2026-09-12 23:52:34 +09:00