From 30739f849baa4d3c4902bcc1dcc24bd963acd5e1 Mon Sep 17 00:00:00 2001 From: Steven Welch Date: Thu, 27 Aug 2026 22:00:24 -0600 Subject: [PATCH 1/2] chore: grant Namecheap root Cloudflare secret access --- main.tf | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/main.tf b/main.tf index dfe679d..89ac482 100644 --- a/main.tf +++ b/main.tf @@ -85,12 +85,12 @@ locals { } "www_access_key_id" = { name = "AWS_ACCESS_KEY_ID" - value = data.sops_file.secret_vars.data["www_aws_access_key_id"] + value = data.sops_file.secret_vars.data["www_access_key_id"] repositories = ["www"] } "www_secret_access_key" = { name = "AWS_SECRET_ACCESS_KEY" - value = data.sops_file.secret_vars.data["www_aws_secret_access_key"] + value = data.sops_file.secret_vars.data["www_secret_access_key"] repositories = ["www"] } "cloudflare_zone_id" = { @@ -101,7 +101,7 @@ locals { "cloudflare_api_token" = { name = "CLOUDFLARE_API_TOKEN" value = data.sops_file.secret_vars.data["cloudflare_api_token"] - repositories = ["www"] + repositories = ["www", "tfroot-namecheap"] } "namecheap_api_key" = { name = "NAMECHEAP_API_KEY" From e617062d9b778a44aff60e69fd7d2cea7214eb42 Mon Sep 17 00:00:00 2001 From: Steven Welch Date: Thu, 27 Aug 2026 22:01:10 -0600 Subject: [PATCH 2/2] fix: preserve existing www secret references --- main.tf | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/main.tf b/main.tf index 89ac482..6cba6df 100644 --- a/main.tf +++ b/main.tf @@ -85,12 +85,12 @@ locals { } "www_access_key_id" = { name = "AWS_ACCESS_KEY_ID" - value = data.sops_file.secret_vars.data["www_access_key_id"] + value = data.sops_file.secret_vars.data["www_aws_access_key_id"] repositories = ["www"] } "www_secret_access_key" = { name = "AWS_SECRET_ACCESS_KEY" - value = data.sops_file.secret_vars.data["www_secret_access_key"] + value = data.sops_file.secret_vars.data["www_aws_secret_access_key"] repositories = ["www"] } "cloudflare_zone_id" = {