feat: Added remote state storage in S3 bucket

2026-07-27 20:32:06 +01:00
parent 31d653ddb5
commit a528867ef5
6 changed files with 186 additions and 37 deletions
@@ -74,3 +74,9 @@ variable "dns_zones" {
  type        = list(string)
  default     = ["luke-else.co.uk"]
 }
+
+variable "state_encryption_passphrase" {
+  description = "Passphrase (min 16 chars) used to encrypt the OpenTofu state file client-side before it's written to the S3 backend - see versions.tf. Set via the TF_VAR_state_encryption_passphrase environment variable (control.sh > Set variables), never as a literal default here."
+  type        = string
+  sensitive   = true
+}