`infra`

this repo holds the code describing my very own infra (machines I use/manage) and is very much a WIP.

should contain zero secrets, except encrypted either with age or ansible-vault.

terraform secrets are supplied as ENV vars at runtime by sourcing the decrypted infra-vars file using direnv, which is in turn stationed in its place using home-manager.