pi 354814a531 security: stop tracking Talos secret backup; rotate edge WireGuard key ...

- remove terraform/terraform.tfvars.local.bak from the index (it carries the
  live cluster PKI: CA keys, service-account key, secretbox secret)
- ignore terraform/*.bak and terraform/edge/.secrets/
- generate a fresh WireGuard relay keypair into the git-ignored local tfvars;
  the committed example now documents rotation instead of holding key material

2026-10-25 18:15:48 -07:00

..

templates

refactor(edge,iam): apply best practices to relay and Zitadel config

2026-10-25 18:03:55 -07:00

cloudflare.tf

refactor(edge,iam): apply best practices to relay and Zitadel config

2026-10-25 18:03:55 -07:00

outputs.tf

feat(edge): Terraform for the China-facing relay and Cloudflare DNS

2026-10-24 22:59:54 -07:00

providers.tf

feat(edge): Terraform for the China-facing relay and Cloudflare DNS

2026-10-24 22:59:54 -07:00

tencent.tf

refactor(edge,iam): apply best practices to relay and Zitadel config

2026-10-25 18:03:55 -07:00

terraform.tfvars.example

feat(edge): Terraform for the China-facing relay and Cloudflare DNS

2026-10-24 22:59:54 -07:00

variables.tf

security: stop tracking Talos secret backup; rotate edge WireGuard key

2026-10-25 18:15:48 -07:00