fix(secrets): add secrets-updatekeys-prod target, use --input-type dotenv

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Deeman
2026-02-27 07:40:03 +01:00
parent dc2428eea4
commit 36bd815525
2 changed files with 7 additions and 2 deletions

View File

@@ -5,7 +5,8 @@ SOPS_DOTENV := sops --input-type dotenv --output-type dotenv
.PHONY: help dev init-landing-seeds css-build css-watch \
secrets-decrypt-dev secrets-decrypt-prod \
secrets-edit-dev secrets-edit-prod \
secrets-encrypt-dev secrets-encrypt-prod
secrets-encrypt-dev secrets-encrypt-prod \
secrets-updatekeys-prod
help:
@echo "Available targets:"
@@ -19,6 +20,7 @@ help:
@echo " secrets-edit-prod Edit .env.prod.sops in \$$EDITOR"
@echo " secrets-encrypt-dev Encrypt .env (plaintext) → .env.dev.sops"
@echo " secrets-encrypt-prod Encrypt .env (plaintext) → .env.prod.sops"
@echo " secrets-updatekeys-prod Re-encrypt .env.prod.sops for all keys in .sops.yaml"
# ── Dev environment ───────────────────────────────────────────────────────────
@@ -73,3 +75,6 @@ secrets-encrypt-dev:
secrets-encrypt-prod:
$(SOPS_DOTENV) --encrypt --in-place .env.prod.sops
@echo "Encrypted .env.prod.sops (commit this file)"
secrets-updatekeys-prod:
sops updatekeys --input-type dotenv .env.prod.sops