Migrated to new backend

Author: xnoto

Makefile

@@ -48,8 +48,9 @@ apply: test plan
 	@${TERRAFORM} apply -auto-approve -compact-warnings .terraform/plan
 	@rm -f .terraform/plan
 
-migrate: init
-	@${TERRAFORM} init -migrate-state -upgrade -input=false -backend-config="key=${S3_KEY}" -backend-config="bucket=${S3_BUCKET}" -backend-config="region=${S3_REGION}" -backend-config="access_key=${S3_ACCESS_KEY}" -backend-config="secret_key=${S3_SECRET_KEY}"
+migrate:
+	@echo "First use `make init` using the old S3 backend, then run `make migrate` to use the new one."
+	@${TERRAFORM} init -migrate-state -backend-config="key=${S3_KEY}" -backend-config="bucket=${S3_BUCKET}" -backend-config="region=${S3_REGION}" -backend-config="access_key=${S3_ACCESS_KEY}" -backend-config="secret_key=${S3_SECRET_KEY}"
 
 test: .git/hooks/pre-commit
 	@pre-commit run -a

secrets/secrets.yaml

@@ -4,8 +4,8 @@ cloudflare_auth_client_id: ENC[AES256_GCM,data:VB1wVTx/Ty1vYkDTD/oYmlOijZCXyA0LK
 cloudflare_auth_client_secret: ENC[AES256_GCM,data:h2v8SarCEPXSZCAqpZBifWfNSOaFDuDumvLZENnBrldqw0u2OIr49wrnEJbkUCqcMIBWjYyp3eOl/UQ04Suyfg==,iv:eanDpbCPKz0vSNEqHr1cNC+K2M1dkwDKpfpJf46BOv0=,tag:/+VEro+OVjMXnORwou4Rpw==,type:str]
 ssh_user: ENC[AES256_GCM,data:YWSAXA==,iv:1Bri+4KYE6UeDL/XKhn/JVjDR3yQEF8dbXTMOavdR74=,tag:mT0WBdryoLiy7uTXnZYeJA==,type:str]
 ssh_host: ENC[AES256_GCM,data:gPoiBur4Bh6n2CgvBQnhGfomCg4=,iv:IC6AAmk1T2bGqlg6YY7yeMZAsE99xKoHlNajYSQZDwo=,tag:sogFq7S9G5WpmK7wvYb8Vw==,type:str]
-s3_bucket: ENC[AES256_GCM,data:sbsol2huTZPIrXQUUGbNmFZqRkQ=,iv:i/rAaTPmnY9SzRBm+Y++mpNIo08BuLqvei4NBHjhzE4=,tag:NBNsG5p9/Q6Yub4Ax4oQKw==,type:str]
-s3_key: ENC[AES256_GCM,data:UJGeRgfK2BOxr+XAkz74PSgHwic=,iv:gAvEWLrIlYaAYHuAWG1h8z/B1E0IN0a6Qhc/wcyNr74=,tag:q9JGP9MCfoy4eh7BhYrDqQ==,type:str]
+s3_bucket: ENC[AES256_GCM,data:hSLKjVLZHwjze+Qkcvl1biEfabY=,iv:mBVyy/oVLKtFpadyKhdMdprh3XGEySUDHHVZkkK1UpM=,tag:9Lc8KYecfTZrW2UxqHbmEA==,type:str]
+s3_key: ENC[AES256_GCM,data:1LrMFl2XTCdikBw6oLW1oMw=,iv:EtZBx8P0b3YUSumEH1xCQy2TaeBpPjzdEe+/YCQqrdU=,tag:G4oq+DZCN9/IGdZDD0wE7A==,type:str]
 s3_region: ENC[AES256_GCM,data:bW9LX1MvGLUW,iv:XsmnFQ7xqKnOeAwQ6Fgyexvn9YXQIDtZTJm1PJYckxA=,tag:95El6ki7awk1iwswHGgHYg==,type:str]
 s3_access_key: ENC[AES256_GCM,data:fHd74FNP/jNQePEDWmbFMUFfnCI=,iv:za6Dp4LOiaegTnEyFEENcwa46kvxXtOjXHDYwx6lzgM=,tag:dHj0gt906krov3zBTjJo1w==,type:str]
 s3_secret_key: ENC[AES256_GCM,data:ueafb5vZeMa2paJdm27HoFpRpeuhsvoG0LIk+z5VCJAvuQZP1VhnEQ==,iv:xZJEibkjJsDaWNOuqR+3XM3BlmCqAwigohS0UPmUoVo=,tag:6ehkC+qMxXZ2o+grVnCVlQ==,type:str]
@@ -36,7 +36,7 @@ sops:
             d2pVcDh3cDNqY1gzSVR5Z2NXcld1Qm8KRdv8vKhMBi1R8fGIphdmY4pfHV1sAqSb
             nAXWA6Ut5/KAPIluSnBtWFkcakulcXYT01XorziztVS0X4nJDzEvMg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-09-27T22:05:10Z"
-    mac: ENC[AES256_GCM,data:6WPRCHQnpkROYoGaq/ZR+pv5SoHo/7EfikX0QRTn3IFbT83DblU1cXjIomEqr9FTdVW27m2bWwihZ0QmA23Ixjui/GW15onqyqXVCuAhCsNNGqs0OamR/lrRledYCNj9QBz0AsNjNXnqnzpblRW82mg8dn1Kf+DiWRefzJ38/wc=,iv:Qv+WJP2KmHR1C0Maf6i7pG51eJ4cWflqQzRqxY3UFO4=,tag:qCJDKn0+ftj7XIP4326PZw==,type:str]
+    lastmodified: "2025-09-27T22:15:18Z"
+    mac: ENC[AES256_GCM,data:mN5dW0vDBjb28flyjr/qJ/MkAvJlpqlDTrOQpZD9wxGJ2R9qHBlHRfxpWPU9JFaZ7HQgc9p/h1hWbNGsIaaipmEJmHOjEwH4o6Y4QDMv3KCTtzxAHo1EYSpw6WPJkHf5hSffHyKsQIJzNP1NMrQhEM42qfyrzGN6r4F1Xs1FjA4=,iv:ZE1QmMiyFWE0A5R01PJUf4d5JCuYigFQoB1jGgc5cVw=,tag:po0FizsAvNTa/oe3ZqFspg==,type:str]
     unencrypted_suffix: _unencrypted
     version: 3.10.2