feat: configure Inifiscal provider and secrets and use for Cloudflare…

… R2 Container Registry

.env

@@ -1,6 +1,7 @@
 #ENC[AES256_GCM,data:ygRyRdAfJhY4vvCjxesbtDC1Eg==,iv:Z+c6vg8dtjSLtMYZOBMv/hAr5VNc6RqoXK+eRVtDzng=,tag:qFP881jrHG5s0kJfNCMnWw==,type:comment]
 export TF_VAR_r2_api_token=ENC[AES256_GCM,data:qTeKbjL7pVeSFFzWOiM/HTiwu0sG1ZaCmejet/T90PNSP0gLl3LLSw==,iv:9Ek4K57sWUEnxCv2nEYVoNCzA1molkpdGw9ABB3XN+A=,tag:IYQ4LpsEjvTWwkOfgR7YOg==,type:str]
 export TF_VAR_cf_api_token=ENC[AES256_GCM,data:5hAHJ+EcleZwEcuQgJ1dqW28pdBYkNnDPKDG72nVI94e+fVFqER39A==,iv:RkrwG978+bXZyl7UJYHhj2DjtdGSxCjSkpMtQUEPc8g=,tag:cW63P+N2e4J/UqzFm1GykQ==,type:str]
+export TF_VAR_cf_acct_id=ENC[AES256_GCM,data:ZxTsDTBZQ5X2koKgzqoibX5Dep61aUjWuR9Wtg+pZRQ=,iv:Z1/m34QgU5zrRRf73tQSip0KkoHRwmILhlgS8oqNx1E=,tag:yWKQDukZ3JCDTujyetdU5w==,type:str]
 #ENC[AES256_GCM,data:XcpnmW8ShVGBGpUn0A==,iv:VUpfPEGyx5id0uzP2hJyNVbcltg+gb0FcNy4mEFk28E=,tag:ISWAKyV5kkhpJpTsbmzXKw==,type:comment]
 export TF_VAR_neon_token=ENC[AES256_GCM,data:bHThnXCdM6JeasqBrKr+wLcm1839bgmXKBCDPgPa1vJvv4s1EQhIvUGJ97CpD1LO8UypzO4DpL/VE2IrNmXpeA==,iv:2ShRIgCHvjWCfdYiWe/xMvh7JIznQe7v3CPLMBdYJTs=,tag:80TUSmQJGy9e6hto8gxutg==,type:str]
 #ENC[AES256_GCM,data:HpjgnW/N8981U6KCGYHA6A==,iv:3Yohc5OLdQ7sC7WWde6trSBgR4U+lJ6hFT6teAd78Lg=,tag:6BBcwz9q6gCQP+1RYDerng==,type:comment]
@@ -10,21 +11,23 @@ export TF_VAR_upstash_api_key=ENC[AES256_GCM,data:YasS2JzrXXxnd/8KxMU41dvXFPpM8H
 export TF_VAR_redpanda_primary_admin_user_pw=ENC[AES256_GCM,data:at63T2n6jyU1ie3k9Hya,iv:8eT5K6iwxcQEayObGqxoxl5WlOO1gNuC4Rj6tNVhe3E=,tag:N+wH8jozFrQGBNTJPpvasg==,type:str]
 export TF_VAR_redpanda_client_id=ENC[AES256_GCM,data:n1V0L6TWMK3nyVuPsZqQTgJNfSxZv/gLUjqS4mrg1Vc=,iv:eSG+8LXI6Nq/VwCRzDpubezkdvW4XDqMniKnDkxdItY=,tag:iKDabSFBsmDK2hyvWAoQEQ==,type:str]
 export TF_VAR_redpanda_client_secret=ENC[AES256_GCM,data:Nlrik9rONdumlbqC+Td553I7aq8xubkFP4XmB+2pJY3Eh9bRgBvR09OkNA4lUGY6/JAjBSzaAXXegfMcMfI06Q==,iv:TQfjfdrF3UpCQlRdJVxii8DZxoU8iF/rc5WIjX3u/dE=,tag:dpKHPFy0WD/M9yM0JypEUQ==,type:str]
+#ENC[AES256_GCM,data:6Gjat0Ds7vtg5n0CFG+tpKZn,iv:CWLhsFu2dUCYNM2mFeTE6vJ5dgGIsfTVTXydFyg+PiM=,tag:EqinyEScDf5VnccXTat8Yw==,type:comment]
+export TF_VAR_infisical_client_id=ENC[AES256_GCM,data:AOTVkvY6YkWkt5Taew/KKkGB7WPguQZ9NRQKNKtcEhOz9uQn,iv:4IEsom/JDt7vcFvixuR8iJ8h8w/doIjJK/vUcm4jXyY=,tag:azxp2aDIgCK5+ud4JEQYjA==,type:str]
+export TF_VAR_infisical_client_secret=ENC[AES256_GCM,data:q7bntw/MgJ409+2L9dchsVcC73cF3wpWKX94SajaK8zzZZCvG9FfHszoqYMj8KD0tInh21rWRvjU7Ug8Gb3gHg==,iv:C/JOwXH4lqw6p8yxYcck+Ehdwv/+hk08WYzaOJnft2o=,tag:Tf3cD7i+ZCv+VSmRBXXJBg==,type:str]
 #ENC[AES256_GCM,data:neaFJZLZDvSKhYFzgc36I5SjLY3i,iv:Bw9/yI35NBuYZXM9VnR/Ez+qt111MiREfW+dOe0Iq7o=,tag:4SBalmybr0fBnOUizmtwiw==,type:comment]
 export AWS_REGION=ENC[AES256_GCM,data:B/qFDzQ09VSj,iv:l9ljVswnbArJchtOIUitwEuDgNbyh6sPKJUy6I958n0=,tag:JeC6E4otNbaOq6JIKqJrDw==,type:str]
 export AWS_ACCESS_KEY_ID=ENC[AES256_GCM,data:xqzJTCAJ9RhQ3lWkF6U22rRPmCekHO1qE2pwYB1ElA0=,iv:MAQnpz3IIn5dXr6Y+a9IPa1pP/ju5hCR2IzaRlgMXko=,tag:KjFynnMDgttxMWZbB2+Vcg==,type:str]
 export AWS_SECRET_ACCESS_KEY=ENC[AES256_GCM,data:VdMUv1eSKT04LbA8DmXDq4weYDZOyoVgcLjHo2VveTF10joo7Axw0c8LfFt8sIN/g2ter96wy4irz2Jxrk00ew==,iv:ftwQQvwflfuWshOQgRN6a5EGeS7MiyNVaOrmNd8vUmA=,tag:VZiwZ8LEvXBY8B176a0FgQ==,type:str]
 export AWS_ENDPOINT_URL_S3=ENC[AES256_GCM,data:yu50NyABjkP65kt0/5/kc8REJ7Rv4l+pkqoc0CB1lB3vumD6cZN2VFNlnCzkQYbwTYSlnLHIDifXEzmC1Fyeddc=,iv:ywld8yIvoacLUstdOeQbXFRpa+qBI3+w1GkxK+PcC0Y=,tag:qmgQXeGZDdH7SKISC3fxfQ==,type:str]
-export CLOUDFLARE_API_TOKEN=ENC[AES256_GCM,data:LXwWNG/EQI0durjzHXIUTHlg1xjxTpt+AAydC7vMnS1Md5zXwyhTuw==,iv:ITKBEJUXh9YSDh14x+xn8FG0yq0UmiSK8CedwEAcwyw=,tag:1eyGzmuyn2vbu+bFYm5XKw==,type:str]
 export CF_ZONE_ID_EEAROMATICS=ENC[AES256_GCM,data:AEZB8p2o5VUQlnusIlA/cSUUrI/HkizubMlgsD97jrQ=,iv:ooiKd6eoRfsKWFSyybY3bz3I2slt8fEZVgFkMoRZEFQ=,tag:YweLROyXUz8UW60Hpm8Tig==,type:str]
 export CF_ZONE_ID_TORINREINE=ENC[AES256_GCM,data:XYNgaSEv8VUru/dPgWiLXxyTHwyEqx1TXR4hwBWKwT4=,iv:wqlywsuPuvCn4+2RxvnpNz5Pc+Lox5MQBrfbSwxWVGA=,tag:WwIk2JlmtDpmR7hgqhSaYQ==,type:str]
 export CF_ACCT_ID=ENC[AES256_GCM,data:rRhob+49qWrcJQBoO1qyKQ/9sexfqgqkoz6XsCMwkgw=,iv:1C0FSy3BL2l2QWUjd2D0vNEDc0rwM3RU/IPPN3vxlVw=,tag:rsgyRwp5eoSsFluxkklhkA==,type:str]
 sops_age__list_0__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXdVg2ZEZpL0RqMjVmVTQr\nUTNjTGEwTkNiRGgzVEJuZGQ1dUpnc3ZoMERrCko0ZVhkTjRSbHhoTy92WGhLbUlL\nYkowaG1BbDFsY0tvV0Y4WUZYSEtzanMKLS0tIEhVUnZYM1lMeFB3RUVWeXlJRDNM\nekNXajB5WHBRNjgyckNiUmNuS3pmVUEK1g6ch8Lbx9b31aZLv2evRTop9kfzYt0S\nXLLz4kiRofkD9oNm7rVuayaNUn/VSglDH6kSNrelOjm/LMx8/MdCtw==\n-----END AGE ENCRYPTED FILE-----\n
 sops_age__list_0__map_recipient=age1nxlyegushypaj0v44m8qex79rn0vef9q290dcwguge8gz6hf5gmqqewuld
 sops_age__list_1__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2Z1dpOFZ1T1ViUUtYRjB4\nb1VZVWdNenl3dXpveVhhd1V4S1ljZ3NoL2drCnA4SXV6aHNna3lzZ3ZLa3VkTHJl\ncDRvbmxBK0tkQ2xteTErT3NTU1NONmMKLS0tIFZVTzZVTFNPOFg3bDVOUFlseUMz\nOTM1UkZrOWovejFlblpCMVJHWFl3bjgK5HpvGKlCJlfOYpsak/J48eKhn1158xUb\n0DSXdrd/gi0/nsYC1R7fzaBshNAG6Ev0WhHG5NueYyJs2z1vaWDh0Q==\n-----END AGE ENCRYPTED FILE-----\n
 sops_age__list_1__map_recipient=age1kvh8vh72ha5tj9ck57tyrhak3zcjjyh5w3ywerjdvzyy5k6av5asztdf2r
-sops_lastmodified=2024-10-03T03:46:10Z
-sops_mac=ENC[AES256_GCM,data:ILpRKxe0sH8DAFy7ENvnoY1DaEcJuRrZhqqEUEcSt+CGn5VDTP/RPeTTzz+JthHh/+WBQRK9pBVqgK7xUkw1qJlW9W+ABnWtdF6VNUTvlgv7cB3XmCZYiFZx+EyafxJhkmMm/m1TN3aZFiA2MeudB6W9y4odnX9Vuuh/lmZ30Xw=,iv:i8zVZlXHND3s4UrqxUVO5ho9i493eofk1kMUh/iATVQ=,tag:vLq4zXJW7jCutyCxF5U8LQ==,type:str]
+sops_lastmodified=2024-10-07T01:40:34Z
+sops_mac=ENC[AES256_GCM,data:1YJmhqmYOOccmIJQzBPl6tkvHLHep7DC35fPq5+dBXMKVYLvsdRr0H40u00sU/Ecaw6YpZpEGB73YlHiKPEH28/RWRdBBImkx+J9szpKmNONEebD3+YGawQVUGlFz40YHvrLfr+qTBXMfuXz1G0hSDnT+QEkE8SvX0/sk7fsMP0=,iv:thdvf3ehcuDyb1CXlB96qdc8uD+u5izyj+kMB+BDVQQ=,tag:7hHtU1nPHG99oZhWpdbngQ==,type:str]
 sops_pgp__list_0__map_created_at=2024-10-01T04:05:55Z
 sops_pgp__list_0__map_enc=-----BEGIN PGP MESSAGE-----\n\nhF4Dfu30CGPZ6+wSAQdARIFTZrAma6gPsE3UmjhNcRp8nMeNxc5LMz9Z41F6Iwcw\nkuUTCCyS2rdmkdc0OHuOp7qgNLW3/fi23vv25jXxOVImF+ts4RCZW7Bk+IKlafoa\n0lwBnZfKT/Y1p1j47u42kblc5R8yQh4D4rDgro4ZMicI7icfJ34OMn63MO2lvSwe\nDEqOp/ln32spFmUad5o6mndK+NF9n4b0LHevzKpKpqUbDaz2MCJhdJJI1H4Juw==\n=P9tV\n-----END PGP MESSAGE-----
 sops_pgp__list_0__map_fp=C856EB7F2EF6AFDD39332A41307E0B68C5D0049B

.github/workflows/cd.yml

@@ -12,6 +12,8 @@ jobs:
           - ee
           - tr
           - cloud
+          - container-registry
+          - infisical
     if: ${{ github.event.workflow_run.conclusion == 'success' }}
     runs-on: ubuntu-latest
     steps:

.github/workflows/ci.yml

@@ -20,4 +20,27 @@ jobs:
         env:
           SOPS_GPG_KEY_B64E: ${{ secrets.SOPS_GPG_KEY_B64E }}
       - run: nix-shell --run "task ${{ matrix.project }}:init"
-      - run: nix-shell --run "task ${{ matrix.project }}:plan"
+      - run: nix-shell --run "task ${{ matrix.project }}:plan"
+  test-cf-r2-registry:
+    name: Cloudflare R2 Registry Unit Tests
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: ./workers/container-registry
+    strategy:
+      matrix:
+        node-version: [18.x, 20.x]
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Use Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: ${{ matrix.node-version }}
+      - name: Install yarn
+        uses: borales/actions-yarn@v4
+        with:
+          cmd: install --frozen-lockfile
+      - run: cp wrangler.toml.example wrangler.toml
+      - run: yarn run typecheck
+      - run: yarn test

.gitignore

@@ -11,5 +11,5 @@ node_modules/
 # terraform
 /infrastructure/*/config/*.hcl
 !/infrastructure/*/config/*.hcl.example
-infrastructure/*/.terraform.lock.hcl
-infrastructure/*/.terraform/
+.terraform/
+.terraform.lock.hcl

.vscode/settings.json

@@ -4,7 +4,9 @@
 		"deno",
 		"dotenv",
 		"eearomatics",
+		"Infisical",
 		"redpanda",
+		"tailscale",
 		"terragrunt",
 		"torinreine"
 	],

Taskfile.yml

@@ -1,18 +1,10 @@
 version: '3'
 
 tasks:
-  init:
-    cmds:
-      - task: ee:clean
-      - task: ee:init
-      - task: tr:clean
-      - task: tr:init
-
+  ### BEGIN SECTION: Terraform shared utility tasks
   tf:init:
     desc: Common tf initialization task.
     preconditions: &necessary-tf-envs
-      # - sh: 'test -d "{{.TF_PROJECT_DIR}}"'
-      #   msg: "Missing Terraform project directory var"
       - sh: 'test -n "$TF_VAR_r2_api_token"'
         msg: "Missing TF_VAR_r2_api_token in your environment"
       - sh: 'test -n "$AWS_REGION"'
@@ -23,114 +15,126 @@ tasks:
         msg: "Missing AWS_SECRET_ACCESS_KEY in your environment"
       - sh: 'test -n "$AWS_ENDPOINT_URL_S3"'
         msg: "Missing AWS_ENDPOINT_URL_S3 in your environment"
-    requires:
+    requires: &necessary-tf-vars
       vars: [TF_PROJECT_DIR]
     dir: '{{.TF_PROJECT_DIR}}'
     cmds:
-      - tofu init -backend-config=../backends/cloudflare-r2.conf {{.CLI_ARGS}}
-  tf:plan:
-    desc: Common tf plan task.
-    dir: '{{.TF_PROJECT_DIR}}'
-    preconditions: *necessary-tf-envs
-    cmds:
-      - tofu plan {{.CLI_ARGS}}
-  tf:apply:
-    desc: Common tf apply task.
-    dir: '{{.TF_PROJECT_DIR}}'
-    preconditions: *necessary-tf-envs
-    cmds:
-      - tofu apply {{.CLI_ARGS}}
+      - tofu init -backend-config={{.ROOT_DIR}}/infrastructure/backends/cloudflare-r2.conf {{.CLI_ARGS}}
   tf:clean:
     desc: Common tf project cleaning task.
     dir: '{{.TF_PROJECT_DIR}}'
     preconditions: *necessary-tf-envs
+    requires: *necessary-tf-vars
     cmds:
       - rm -rf ./.terraform .terraform.lock.hcl
   tf:run:
     desc: Common tf project runner task.
     dir: '{{.TF_PROJECT_DIR}}'
     preconditions: *necessary-tf-envs
+    requires: *necessary-tf-vars
     cmds:
       - tofu {{.CLI_ARGS}}
+  tf:*:
+    desc: Common tf project runner task.
+    dir: '{{.TF_PROJECT_DIR}}'
+    preconditions: *necessary-tf-envs
+    requires: *necessary-tf-vars
+    vars: &subcommand-passthrough-vars
+      SUBCOMMAND: '{{index .MATCH 0}}'
+    cmds:
+      - tofu {{.SUBCOMMAND}} {{.CLI_ARGS}}
+  ### END SECTION: Terraform shared utility tasks
+
+  ### BEGIN SECTION: Wrangler shared utility tasks
+  wrangler:*:
+    desc: Deploy a Wrangler worker project
+    preconditions: &necessary-wrangler-envs
+      - sh: 'npx wrangler whoami'
+        msg: "Wrangler MUST be logged in!"
+    vars: *subcommand-passthrough-vars
+    requires: &necessary-wrangler-vars
+      vars: [WRANGLER_PROJECT_DIR]
+    dir: '{{.WRANGLER_PROJECT_DIR}}'
+    cmds:
+      - npx wrangler {{.CLI_ARGS}}
+  ### END SECTION: Wrangler shared utility tasks
 
+  ### BEGIN SECTION: Terraform modules for eearomatics.com
   ee:init:
     desc: Initialize the eearomatics.com Terraform module
     cmds:
       - task: tf:init
         vars:
           TF_PROJECT_DIR: infrastructure/eearomatics
-  ee:plan:
-    desc: Plan the eearomatics.com Terraform module
-    cmds:
-      - task: tf:plan
-        vars:
-          TF_PROJECT_DIR: infrastructure/eearomatics
-  ee:apply:
-    desc: Apply the eearomatics.com Terraform module
-    cmds:
-      - task: tf:apply
-        vars:
-          TF_PROJECT_DIR: infrastructure/eearomatics
   ee:clean:
     desc: Clean the eearomatics.com Terraform module
     cmds:
       - task: tf:clean
         vars:
           TF_PROJECT_DIR: infrastructure/eearomatics
-  ee:run:
+  ee:*:
     desc: Run a command in the eearomatics.com Terraform module
+    vars: *subcommand-passthrough-vars
     cmds:
-      - task: tf:run
+      - task: tf:{{.SUBCOMMAND}}
         vars:
           TF_PROJECT_DIR: infrastructure/eearomatics
+  ### END SECTION: Terraform modules for eearomatics.com
 
+  ### BEGIN SECTION: Terraform modules for torinreine.com
   tr:init:
     desc: Initialize the torinreine.com Terraform module
     cmds:
       - task: tf:init
         vars:
           TF_PROJECT_DIR: infrastructure/torinreine
-  tr:plan:
-    desc: Plan the torinreine.com Terraform module
-    cmds:
-      - task: tf:plan
-        vars:
-          TF_PROJECT_DIR: infrastructure/torinreine
-  tr:apply:
-    desc: Apply the torinreine.com Terraform module
-    cmds:
-      - task: tf:apply
-        vars:
-          TF_PROJECT_DIR: infrastructure/torinreine
   tr:clean:
     desc: Clean the torinreine.com Terraform module
     cmds:
       - task: tf:clean
         vars:
           TF_PROJECT_DIR: infrastructure/torinreine
-  tr:run:
+  tr:*:
     desc: Run a command in the torinreine.com Terraform module
+    vars: *subcommand-passthrough-vars
     cmds:
-      - task: tf:run
+      - task: tf:{{.SUBCOMMAND}}
         vars:
           TF_PROJECT_DIR: infrastructure/torinreine
+  ### END SECTION: Terraform modules for torinreine.com
 
-  cloud:init:
-    desc: Initialize the cloud Terraform module
+  ### BEGIN SECTION: Container-registry workers and Terraform module
+  cr:tf:init:
+    desc: Initialize the container-registry Terraform module
     cmds:
       - task: tf:init
         vars:
-          TF_PROJECT_DIR: infrastructure/cloud
-  cloud:plan:
-    desc: Plan the cloud Terraform module
+          TF_PROJECT_DIR: infrastructure/container-registry
+  cr:deploy:
+    desc: "Deploy the container-registry worker"
+    cmds:
+
+      - task: tf:apply
+  cr:tf:clean:
+    desc: Clean the container-registry Terraform module
     cmds:
-      - task: tf:plan
+      - task: tf:clean
         vars:
-          TF_PROJECT_DIR: infrastructure/cloud
-  cloud:apply:
-    desc: Apply the cloud Terraform module
+          TF_PROJECT_DIR: infrastructure/container-registry
+  cr:tf:*:
+    desc: Run a command in the container-registry Terraform module
+    vars: *subcommand-passthrough-vars
     cmds:
-      - task: tf:apply
+      - task: tf:{{.SUBCOMMAND}}
+        vars:
+          TF_PROJECT_DIR: infrastructure/container-registry
+  ### END SECTION: Container-registry workers and Terraform module
+
+  ### BEGIN SECTION: Shared cloud resources Terraform module
+  cloud:init:
+    desc: Initialize the cloud Terraform module
+    cmds:
+      - task: tf:init
         vars:
           TF_PROJECT_DIR: infrastructure/cloud
   cloud:clean:
@@ -139,15 +143,41 @@ tasks:
       - task: tf:clean
         vars:
           TF_PROJECT_DIR: infrastructure/cloud
-  cloud:run:
+  cloud:*:
     desc: Run a command in the cloud Terraform module
+    vars: *subcommand-passthrough-vars
     cmds:
-      - task: tf:run
+      - task: tf:{{.SUBCOMMAND}}
         vars:
           TF_PROJECT_DIR: infrastructure/cloud
+  ### END SECTION: Shared cloud resources Terraform module
+
+  ### BEGIN SECTION: Infisical Terraform module
+  infisical:init:
+    desc: Initialize the infisical Terraform module
+    cmds:
+      - task: tf:init
+        vars:
+          TF_PROJECT_DIR: infrastructure/infisical
+  infisical:clean:
+    desc: Clean the infisical Terraform module
+    cmds:
+      - task: tf:clean
+        vars:
+          TF_PROJECT_DIR: infrastructure/infisical
+  infisical:*:
+    desc: Run a command in the infisical Terraform module
+    vars: *subcommand-passthrough-vars
+    cmds:
+      - task: tf:{{.SUBCOMMAND}}
+        vars:
+          TF_PROJECT_DIR: infrastructure/infisical
+  ### END SECTION: Infisical Terraform module
 
+  ### BEGIN SECTION: create-cloudflare utilities
   cf:create:
     desc: Run the create-cloudflare CLI
     cmds:
       - yarn install --frozen-lockfile
-      - "{{.ROOT_DIR}}/node_modules/.bin/create-cloudflare {{.CLI_ARGS}}"
+      - "{{.ROOT_DIR}}/node_modules/.bin/create-cloudflare {{.CLI_ARGS}}"
+  ### END SECTION: create-cloudflare utilities

infrastructure/infisical/eearomatics.tf

@@ -0,0 +1,42 @@
+resource "infisical_project" "eearomatics" {
+  name = "Ethereal Elegance Aromatics"
+  slug = "eearomatics"
+}
+
+resource "infisical_project_user" "admin" {
+  project_id = infisical_project.eearomatics.id
+  username   = "[email protected]"
+  roles = [
+    {
+      role_slug = "admin"
+    }
+  ]
+}
+
+resource "infisical_project_user" "github-actions" {
+  project_id = infisical_project.eearomatics.id
+  username   = "[email protected]"
+  roles = [
+    {
+      role_slug = "member"
+    }
+  ]
+}
+
+### NOTE: Automatically generated in new projects
+# resource "infisical_project_environment" "prod" {
+#   name       = "Production"
+#   project_id = infisical_project.eearomatics.id
+#   slug       = "prod"
+# }
+# resource "infisical_project_environment" "dev" {
+#   name       = "Development"
+#   project_id = infisical_project.eearomatics.id
+#   slug       = "dev"
+# }
+### NOTE: Generated but MANUALLY DELETED
+# resource "infisical_project_environment" "staging" {
+#   name       = "Staging"
+#   project_id = infisical_project.eearomatics.id
+#   slug       = "staging"
+# }

infrastructure/infisical/fly-integration.tf

@@ -0,0 +1,2 @@
+# NOTE: There is no resource for fly.io integration.
+# This must be MANUALLY configured.

infrastructure/infisical/provider.tf

@@ -0,0 +1,4 @@
+provider "infisical" {
+  client_id     = var.infisical_client_id
+  client_secret = var.infisical_client_secret
+}