jfraeys/infra
Watch
1
0
Fork
You've already forked infra
 0
Code Issues 21 Pull requests 4 Projects Releases Packages Wiki Activity Actions

chore(scripts): remove two spent one-off scripts #39

Merged
jfraeys merged 1 commit from jfraeys/fix/recover-secondary-sops into main 2026-10-10 10:19:42 -04:00
Conversation 0 Commits 1 Files changed 3 +3 -282
jfraeys commented 2026-10-10 10:18:27 -04:00
Owner
Copy link

Removes two scripts that already did their job:

  • scripts/sops-cutover.sh: the SOPS cutover ran on 2026-10-09 (it now refuses to run, since vault.sops.yml exists).
  • scripts/recover-secondary-repo.sh: one-off recovery that ran on 2026-09-23 (RESTIC_SECONDARY_REPOSITORY in the vault points at the infra-backup-v2 repo it created). It was Ansible-Vault-only and refused to run under SOPS; porting a completed one-off is dead weight.

docs/secrets-management-sops.md updated to match. Kept deliberately: the Cloudflare/OVH wizards (TF_VAR_enable_desec_dns and enable_cloudflare_dns are both still true, so the Cloudflare->deSEC migration is not finished) and find-secret-change-dates.sh (goes with the Ansible Vault retirement).

(Branch name predates the decision to delete rather than port the script.)

🤖 Generated with Claude Code

Removes two scripts that already did their job: - scripts/sops-cutover.sh: the SOPS cutover ran on 2026-10-09 (it now refuses to run, since vault.sops.yml exists). - scripts/recover-secondary-repo.sh: one-off recovery that ran on 2026-09-23 (RESTIC_SECONDARY_REPOSITORY in the vault points at the infra-backup-v2 repo it created). It was Ansible-Vault-only and refused to run under SOPS; porting a completed one-off is dead weight. docs/secrets-management-sops.md updated to match. Kept deliberately: the Cloudflare/OVH wizards (TF_VAR_enable_desec_dns and enable_cloudflare_dns are both still true, so the Cloudflare->deSEC migration is not finished) and find-secret-change-dates.sh (goes with the Ansible Vault retirement). (Branch name predates the decision to delete rather than port the script.) 🤖 Generated with [Claude Code](https://claude.com/claude-code)
chore(scripts): remove two spent one-off scripts
All checks were successful
Lint / lint (pull_request) Successful in 1m11s
Details
554121e938
 
sops-cutover.sh already ran (it now refuses to: vault.sops.yml exists) and
recover-secondary-repo.sh already ran on 2026-09-23 (RESTIC_SECONDARY_REPOSITORY
in the vault points at the fresh infra-backup-v2 repo it created), and it was
Ansible-Vault-only and refused to run under SOPS. Porting a completed one-off
would be dead weight. The retirement checklist is updated.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
jfraeys/infra!39
No description provided.