fix: provide openbao token to renovate for devenv update #155

Closed

thesuperRL wants to merge 1025 commits from fix-renovate-openbao-auth into main

pull from: fix-renovate-openbao-auth

merge into: ScottyLabs:main

ScottyLabs:main

ScottyLabs:renovate/lockfiles

ScottyLabs:renovate/kennel

ScottyLabs:refactor/sops-nix

ScottyLabs:fix/vault-agent-file-paths

ScottyLabs:fix/ci-semgrep-aarch64

ScottyLabs:crawler-archive-disk

Conversation 6 Commits 1025 Files changed 195 +17

thesuperRL commented 2026-09-26 02:17:03 +00:00

Owner

Copy link

No description provided.

thesuperRL added 1 commit 2026-09-26 02:17:03 +00:00

fix: provide openbao token to renovate for devenv update ce49b23765

scottylabs-bot commented 2026-09-26 02:17:36 +00:00

Owner

Copy link

Kennel Deployments

Service	URL
docs	https://infrastructure-docs-pr-155.scottylabs.net

Last updated for commit ce49b23.

<!-- kennel-deployment --> ### Kennel Deployments | Service | URL | | --- | --- | | docs | https://infrastructure-docs-pr-155.scottylabs.net | Last updated for commit `ce49b23`.

scottylabs-bot commented 2026-09-26 02:17:38 +00:00

Owner

Copy link

Ran Plan for 17 projects:

1. project: forgejo dir: . workspace: forgejo
2. project: posthog dir: . workspace: posthog
3. project: snot dir: . workspace: snot
4. project: governance dir: . workspace: governance
5. project: matrix dir: . workspace: matrix
6. project: headscale dir: . workspace: headscale
7. project: litellm dir: . workspace: litellm
8. project: kennel dir: . workspace: kennel
9. project: observability dir: . workspace: observability
10. project: ricochet dir: . workspace: ricochet
11. project: atlantis dir: . workspace: atlantis
12. project: garage-webadmin dir: . workspace: garage-webadmin
13. project: keycloak dir: . workspace: keycloak
14. project: vaultwarden dir: . workspace: vaultwarden
15. project: webhook dir: . workspace: webhook
16. project: openbao dir: . workspace: openbao
17. project: hosts dir: . workspace: hosts

---

1. project: forgejo dir: . workspace: forgejo

Show Output

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/1dc5f37a45023db6482bfb4c4bd57cbe8f4021bd83bb635c5b6c27746301ffb4.sqlite' is busy


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Installing cloudflare/cloudflare v5.25.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing keycloak/keycloak v5.9.0 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed keycloak/keycloak v5.9.0 (unauthenticated)
- Using keycloak/keycloak v5.9.0 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.25.0 (unauthenticated)
- Using cloudflare/cloudflare v5.25.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
garage_bucket.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960]
garage_key.forgejo: Refreshing state... [id=GKea9810d648000e3e3b8df725]
garage_bucket_permission.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960/GKea9810d648000e3e3b8df725]
vault_kv_secret_v2.forgejo_storage: Refreshing state... [id=secret/data/infra/forgejo-storage]
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.forgejo: Refreshing state... [id=110b9b02-18e1-4bac-b5ce-936bbfbc83d6]
keycloak_openid_group_membership_protocol_mapper.forgejo_groups: Refreshing state... [id=72c7154f-372d-4a39-97c0-6516a88d6198]
vault_kv_secret_v2.forgejo_oidc: Refreshing state... [id=secret/data/infra/forgejo-oidc]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["git"]: Refreshing state... [id=f0fa6f4acf6bf381474c1a9304225f68]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.

• ▶️ To apply this plan, comment:

  atlantis apply -p forgejo
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p forgejo
  

No changes. Your infrastructure matches the configuration.

---

2. project: posthog dir: . workspace: posthog

Show Output

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/1dc5f37a45023db6482bfb4c4bd57cbe8f4021bd83bb635c5b6c27746301ffb4.sqlite' is busy


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Installing cloudflare/cloudflare v5.25.0 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing keycloak/keycloak v5.9.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed keycloak/keycloak v5.9.0 (unauthenticated)
- Using keycloak/keycloak v5.9.0 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.25.0 (unauthenticated)
- Using cloudflare/cloudflare v5.25.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Reading...
data.cloudflare_zones.all: Read complete after 0s
cloudflare_dns_record.this["v"]: Refreshing state... [id=a34d75a85d3128693767b2db9b7f233e]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.

• ▶️ To apply this plan, comment:

  atlantis apply -p posthog
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p posthog
  

No changes. Your infrastructure matches the configuration.

---

3. project: snot dir: . workspace: snot

Show Output

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/1dc5f37a45023db6482bfb4c4bd57cbe8f4021bd83bb635c5b6c27746301ffb4.sqlite' is busy


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing cloudflare/cloudflare v5.25.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing keycloak/keycloak v5.9.0 to the shared cache directory...
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.9.0 (unauthenticated)
- Using keycloak/keycloak v5.9.0 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.25.0 (unauthenticated)
- Using cloudflare/cloudflare v5.25.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Read complete after 2s
cloudflare_dns_record.this["knot"]: Refreshing state... [id=264276915648465296ad9d24fb70a29b]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.

• ▶️ To apply this plan, comment:

  atlantis apply -p snot
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p snot
  

No changes. Your infrastructure matches the configuration.

---

4. project: governance dir: . workspace: governance

Show Output

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/1dc5f37a45023db6482bfb4c4bd57cbe8f4021bd83bb635c5b6c27746301ffb4.sqlite' is busy


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing keycloak/keycloak v5.9.0 to the shared cache directory...
- Installing cloudflare/cloudflare v5.25.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed keycloak/keycloak v5.9.0 (unauthenticated)
- Using keycloak/keycloak v5.9.0 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.25.0 (unauthenticated)
- Using cloudflare/cloudflare v5.25.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
vault_kv_secret_v2.governance_ci_bot_token: Refreshing state... [id=secret/data/secretspec/governance/ci/BOT_TOKEN]
vault_policy.governance: Refreshing state... [id=governance]
keycloak_openid_client.governance_cli: Refreshing state... [id=f19d0308-19a8-4fc4-aa5f-f909fc38c5fe]
data.keycloak_openid_client.realm_management: Reading...
vault_approle_auth_backend_role.governance: Refreshing state... [id=auth/approle/role/governance]
vault_kv_secret_v2.governance_ci_keycloak_client_id: Refreshing state... [id=secret/data/secretspec/governance/ci/KEYCLOAK_CLIENT_ID]
vault_kv_secret_v2.governance_ci_keycloak_client_secret: Refreshing state... [id=secret/data/secretspec/governance/ci/KEYCLOAK_CLIENT_SECRET]
data.keycloak_openid_client.realm_management: Read complete after 0s [id=a0a15f13-b554-4bed-9fb2-3e63e0301278]
keycloak_openid_client_service_account_role.governance_cli_realm_management["manage-clients"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/366f6242-2ce3-4be8-b861-3561e3c4b865]
keycloak_openid_client_service_account_role.governance_cli_realm_management["manage-users"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/eb96eb71-82eb-4317-b8f5-326472e11484]
keycloak_openid_client_service_account_role.governance_cli_realm_management["query-clients"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/16d40468-7ba1-4f17-ba0d-0741880f291a]
keycloak_openid_client_service_account_role.governance_cli_realm_management["view-users"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/65f4c673-fc55-430c-b4b6-fd14ed151966]
data.cloudflare_zones.all: Read complete after 2s

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.

• ▶️ To apply this plan, comment:

  atlantis apply -p governance
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p governance
  

No changes. Your infrastructure matches the configuration.

---

5. project: matrix dir: . workspace: matrix

Show Output

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/1dc5f37a45023db6482bfb4c4bd57cbe8f4021bd83bb635c5b6c27746301ffb4.sqlite' is busy
copying path '/nix/store/adcpmshidndclaz4dxjsgklrx3gqhaxp-source' from 'http://localhost:5000'...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing cloudflare/cloudflare v5.25.0 to the shared cache directory...
- Installing keycloak/keycloak v5.9.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.9.0 (unauthenticated)
- Using keycloak/keycloak v5.9.0 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.25.0 (unauthenticated)
- Using cloudflare/cloudflare v5.25.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["matrix"]: Refreshing state... [id=c37d2e1a4edf950b4af4544574c159a8]
cloudflare_dns_record.this["@"]: Refreshing state... [id=63ff3b423afd444f8bd31201db232ada]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.

• ▶️ To apply this plan, comment:

  atlantis apply -p matrix
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p matrix
  

No changes. Your infrastructure matches the configuration.

---

6. project: headscale dir: . workspace: headscale

Show Output

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/1dc5f37a45023db6482bfb4c4bd57cbe8f4021bd83bb635c5b6c27746301ffb4.sqlite' is busy
copying path '/nix/store/61snslw9vdr3ynq1sx7rmvqxcd4v43iv-source' from 'http://localhost:5000'...
copying path '/nix/store/8bhhaac4n9nd6z3ickg9fwkv0b1plp5g-source' from 'http://localhost:5000'...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing keycloak/keycloak v5.9.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing cloudflare/cloudflare v5.25.0 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed keycloak/keycloak v5.9.0 (unauthenticated)
- Using keycloak/keycloak v5.9.0 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.25.0 (unauthenticated)
- Using cloudflare/cloudflare v5.25.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.headplane_cookie: Refreshing state... [id=none]
vault_kv_secret_v2.headplane_cookie: Refreshing state... [id=secret/data/infra/headplane-cookie]
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.headscale: Refreshing state... [id=f2875c14-dfff-4fd4-b60b-4d1e066aaeb8]
keycloak_openid_client.headplane: Refreshing state... [id=40d2dbf9-409b-4edc-974c-85d5e939efac]
vault_kv_secret_v2.headscale_oidc: Refreshing state... [id=secret/data/infra/headscale-oidc]
keycloak_openid_group_membership_protocol_mapper.headscale_groups: Refreshing state... [id=f091397a-9b6e-4887-9913-12fb542d7210]
vault_kv_secret_v2.headplane_oidc: Refreshing state... [id=secret/data/infra/headplane-oidc]
keycloak_openid_group_membership_protocol_mapper.headplane_groups: Refreshing state... [id=fd683ca7-ed77-44f1-b3cc-47241ccb6fb7]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["headplane"]: Refreshing state... [id=9139cfa1f058db85d837defe0460fd20]
cloudflare_dns_record.this["headscale"]: Refreshing state... [id=4207dabef0c8dc1972f9d5aa1cd17a00]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.

• ▶️ To apply this plan, comment:

  atlantis apply -p headscale
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p headscale
  

No changes. Your infrastructure matches the configuration.

---

7. project: litellm dir: . workspace: litellm

Show Output

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/1dc5f37a45023db6482bfb4c4bd57cbe8f4021bd83bb635c5b6c27746301ffb4.sqlite' is busy
copying path '/nix/store/adcpmshidndclaz4dxjsgklrx3gqhaxp-source' from 'http://localhost:5000'...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing cloudflare/cloudflare v5.25.0 to the shared cache directory...
- Installing keycloak/keycloak v5.9.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.9.0 (unauthenticated)
- Using keycloak/keycloak v5.9.0 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.25.0 (unauthenticated)
- Using cloudflare/cloudflare v5.25.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.litellm_salt_key: Refreshing state... [id=none]
random_password.litellm_master_key: Refreshing state... [id=none]
random_password.cli_proxy_api_key: Refreshing state... [id=none]
vault_kv_secret_v2.litellm_master_key: Refreshing state... [id=secret/data/infra/litellm-master-key]
vault_kv_secret_v2.cli_proxy_api_key: Refreshing state... [id=secret/data/infra/cli-proxy-api-key]
vault_kv_secret_v2.litellm_salt_key: Refreshing state... [id=secret/data/infra/litellm-salt-key]
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.litellm: Refreshing state... [id=4ee5ecdd-c370-4a52-93ae-744332e0a509]
keycloak_openid_group_membership_protocol_mapper.litellm_groups: Refreshing state... [id=b2e932af-b3e8-4cac-a6ea-027c1022a22f]
vault_kv_secret_v2.litellm_oidc: Refreshing state... [id=secret/data/infra/litellm-oidc]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["litellm"]: Refreshing state... [id=0fa6e5399aa6a69d978d6d425ca14f44]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.

• ▶️ To apply this plan, comment:

  atlantis apply -p litellm
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p litellm
  

No changes. Your infrastructure matches the configuration.

---

8. project: kennel dir: . workspace: kennel

Show Output

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/1dc5f37a45023db6482bfb4c4bd57cbe8f4021bd83bb635c5b6c27746301ffb4.sqlite' is busy
copying path '/nix/store/8bhhaac4n9nd6z3ickg9fwkv0b1plp5g-source' from 'http://localhost:5000'...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing cloudflare/cloudflare v5.25.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing keycloak/keycloak v5.9.0 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installed keycloak/keycloak v5.9.0 (unauthenticated)
- Using keycloak/keycloak v5.9.0 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.25.0 (unauthenticated)
- Using cloudflare/cloudflare v5.25.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
vault_policy.kennel: Refreshing state... [id=kennel]
vault_approle_auth_backend_role.kennel: Refreshing state... [id=auth/approle/role/kennel]
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Read complete after 2s
cloudflare_dns_record.this["*"]: Refreshing state... [id=2d4b06ae1c39a5d196a27114e07c97e9]
cloudflare_dns_record.this["s3.kennel"]: Refreshing state... [id=d3acfc0e5ca45e0704c40d9e3fa2e60f]
cloudflare_dns_record.this["kennel"]: Refreshing state... [id=a34066db99519085f24a01cebcb25d69]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.

• ▶️ To apply this plan, comment:

  atlantis apply -p kennel
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p kennel
  

No changes. Your infrastructure matches the configuration.

---

9. project: observability dir: . workspace: observability

Show Output

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/1dc5f37a45023db6482bfb4c4bd57cbe8f4021bd83bb635c5b6c27746301ffb4.sqlite' is busy
copying path '/nix/store/8bhhaac4n9nd6z3ickg9fwkv0b1plp5g-source' from 'http://localhost:5000'...
copying path '/nix/store/adcpmshidndclaz4dxjsgklrx3gqhaxp-source' from 'http://localhost:5000'...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Installing cloudflare/cloudflare v5.25.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing keycloak/keycloak v5.9.0 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.9.0 (unauthenticated)
- Using keycloak/keycloak v5.9.0 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.25.0 (unauthenticated)
- Using cloudflare/cloudflare v5.25.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.grafana_secret_key: Refreshing state... [id=none]
vault_kv_secret_v2.grafana_secret_key: Refreshing state... [id=secret/data/infra/grafana-secret-key]
data.cloudflare_zones.all: Reading...
garage_key.tempo: Refreshing state... [id=GK9769dcb3b38a1ae26ac62b3c]
garage_bucket.loki_chunks: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3]
garage_key.loki: Refreshing state... [id=GKeed8ed294debe12a38bbd470]
garage_bucket.tempo_traces: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c]
vault_kv_secret_v2.loki_s3: Refreshing state... [id=secret/data/infra/loki-s3]
garage_bucket_permission.loki: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3/GKeed8ed294debe12a38bbd470]
vault_kv_secret_v2.tempo_s3: Refreshing state... [id=secret/data/infra/tempo-s3]
garage_bucket_permission.tempo: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c/GK9769dcb3b38a1ae26ac62b3c]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.grafana: Refreshing state... [id=527e25bc-77c3-43d5-ac28-32aa2f21fa9c]
keycloak_openid_group_membership_protocol_mapper.grafana_groups: Refreshing state... [id=5c54e939-7a03-4857-93f5-437ca25e206e]
vault_kv_secret_v2.grafana_oidc: Refreshing state... [id=secret/data/infra/grafana-oidc]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["uptime"]: Refreshing state... [id=0909f2bd8ade5d54a53b58a2a3fef540]
cloudflare_dns_record.this["grafana"]: Refreshing state... [id=9924f9e66892a5aeafe09ed0128a65a0]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.

• ▶️ To apply this plan, comment:

  atlantis apply -p observability
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p observability
  

No changes. Your infrastructure matches the configuration.

---

10. project: ricochet dir: . workspace: ricochet

Show Output

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/1dc5f37a45023db6482bfb4c4bd57cbe8f4021bd83bb635c5b6c27746301ffb4.sqlite' is busy
copying path '/nix/store/8bhhaac4n9nd6z3ickg9fwkv0b1plp5g-source' from 'http://localhost:5000'...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing cloudflare/cloudflare v5.25.0 to the shared cache directory...
- Installing keycloak/keycloak v5.9.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed keycloak/keycloak v5.9.0 (unauthenticated)
- Using keycloak/keycloak v5.9.0 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.25.0 (unauthenticated)
- Using cloudflare/cloudflare v5.25.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 1s [id=scottylabs]
data.cloudflare_zones.all: Reading...
data.cloudflare_zones.all: Read complete after 0s
cloudflare_dns_record.this["oauth"]: Refreshing state... [id=346fac8950e4873a27d5cfb72104783d]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.

• ▶️ To apply this plan, comment:

  atlantis apply -p ricochet
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p ricochet
  

No changes. Your infrastructure matches the configuration.

---

11. project: atlantis dir: . workspace: atlantis

Show Output

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
copying path '/nix/store/8bhhaac4n9nd6z3ickg9fwkv0b1plp5g-source' from 'http://localhost:5000'...
copying path '/nix/store/adcpmshidndclaz4dxjsgklrx3gqhaxp-source' from 'http://localhost:5000'...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding svalabs/forgejo versions matching "~> 1.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing cloudflare/cloudflare v5.25.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing keycloak/keycloak v5.9.0 to the shared cache directory...
- Installing svalabs/forgejo v1.6.1 to the shared cache directory...
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed keycloak/keycloak v5.9.0 (unauthenticated)
- Using keycloak/keycloak v5.9.0 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed svalabs/forgejo v1.6.1 (unauthenticated)
- Using svalabs/forgejo v1.6.1 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.25.0 (unauthenticated)
- Using cloudflare/cloudflare v5.25.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│   - svalabs/forgejo
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.atlantis_webhook_secret: Refreshing state... [id=none]
vault_kv_secret_v2.atlantis_webhook: Refreshing state... [id=secret/data/infra/atlantis]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.forgejo_repository.infrastructure: Reading...
data.forgejo_repository.governance: Reading...
data.forgejo_repository.infrastructure: Read complete after 0s [name=infrastructure]
data.forgejo_repository.governance: Read complete after 0s [name=governance]
forgejo_repository_webhook.infrastructure: Refreshing state...
forgejo_repository_webhook.governance: Refreshing state...
data.cloudflare_zones.all: Reading...
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["atlantis"]: Refreshing state... [id=d0419d10a0c0bb715bcbadc7a1c73cbb]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.

• ▶️ To apply this plan, comment:

  atlantis apply -p atlantis
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p atlantis
  

No changes. Your infrastructure matches the configuration.

---

12. project: garage-webadmin dir: . workspace: garage-webadmin

Show Output

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/1dc5f37a45023db6482bfb4c4bd57cbe8f4021bd83bb635c5b6c27746301ffb4.sqlite' is busy


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing keycloak/keycloak v5.9.0 to the shared cache directory...
- Installing cloudflare/cloudflare v5.25.0 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.9.0 (unauthenticated)
- Using keycloak/keycloak v5.9.0 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.25.0 (unauthenticated)
- Using cloudflare/cloudflare v5.25.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
random_password.garage_webadmin_jwt: Refreshing state... [id=none]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.garage_webadmin: Refreshing state... [id=a48c9f66-cde3-463d-970c-b2d7de716185]
vault_kv_secret_v2.garage_webadmin_oidc: Refreshing state... [id=secret/data/infra/garage-webadmin-oidc]
keycloak_openid_group_membership_protocol_mapper.garage_webadmin_groups: Refreshing state... [id=a86e928b-6c7a-4081-a291-637e752fbabf]
vault_kv_secret_v2.garage_webadmin_jwt: Refreshing state... [id=secret/data/infra/garage-webadmin-jwt]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["garage"]: Refreshing state... [id=4054146ceff1515773704f89136b25f1]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.

• ▶️ To apply this plan, comment:

  atlantis apply -p garage-webadmin
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p garage-webadmin
  

No changes. Your infrastructure matches the configuration.

---

13. project: keycloak dir: . workspace: keycloak

Show Output

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/1dc5f37a45023db6482bfb4c4bd57cbe8f4021bd83bb635c5b6c27746301ffb4.sqlite' is busy
copying path '/nix/store/8bhhaac4n9nd6z3ickg9fwkv0b1plp5g-source' from 'http://localhost:5000'...
this derivation will be built:
  /nix/store/j8xy1cwgkm41gvdqsjifiwn8lwxhh264-config.tf.json.drv
building '/nix/store/j8xy1cwgkm41gvdqsjifiwn8lwxhh264-config.tf.json.drv'...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Installing cloudflare/cloudflare v5.25.0 to the shared cache directory...
- Installing keycloak/keycloak v5.9.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed keycloak/keycloak v5.9.0 (unauthenticated)
- Using keycloak/keycloak v5.9.0 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.25.0 (unauthenticated)
- Using cloudflare/cloudflare v5.25.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_saml_identity_provider.cmu_saml: Refreshing state... [id=cmu-saml]
keycloak_realm_user_profile.scottylabs: Refreshing state... [id=scottylabs]
keycloak_custom_identity_provider_mapper.cmu_saml_username: Refreshing state... [id=32fed5ec-b30e-4b69-90a3-64c58f592ded]
data.vault_kv_secret_v2.keycloak_idp: Reading...
data.vault_kv_secret_v2.forgejo_idp: Reading...
data.vault_kv_secret_v2.keycloak_ldap: Reading...
data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp]
data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp]
data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap]
keycloak_oidc_google_identity_provider.google: Refreshing state... [id=google]
keycloak_oidc_identity_provider.cmu: Refreshing state... [id=cmu]
keycloak_oidc_identity_provider.slack: Refreshing state... [id=slack]
keycloak_oidc_identity_provider.cmu_git: Refreshing state... [id=cmu-dev]
keycloak_ldap_user_federation.cmu: Refreshing state... [id=TtPPdhQJRUSFFwr_nJ2gcA]
keycloak_custom_identity_provider_mapper.google_id: Refreshing state... [id=eda09ecd-d9ce-4ab0-a585-8f7d45dff7de]
keycloak_custom_identity_provider_mapper.google_name: Refreshing state... [id=9d5c678f-df91-493d-a575-be1ce56a34e0]
keycloak_custom_identity_provider_mapper.google_email: Refreshing state... [id=ab2117f2-dcbf-4409-a7b7-c7354317e6cc]
keycloak_custom_identity_provider_mapper.cmu_username: Refreshing state... [id=65d1857d-19e5-4db5-940c-7751b770b4ac]
data.cloudflare_zones.all: Read complete after 1s
keycloak_custom_identity_provider_mapper.cmudev_email: Refreshing state... [id=2763e7d7-f102-479e-a560-41704bcf5e4b]
keycloak_custom_identity_provider_mapper.cmudev_name: Refreshing state... [id=17703dd7-f88f-4d6b-88f0-e7561e796c8f]
keycloak_custom_identity_provider_mapper.cmudev_id: Refreshing state... [id=5944bfd3-9704-482e-ac25-c41a40351cd7]
keycloak_custom_identity_provider_mapper.cmudev_username: Refreshing state... [id=8f04fb48-8434-43d6-accd-5b3a1e48e9b2]
keycloak_ldap_msad_user_account_control_mapper.cmu_ldap_msad: Refreshing state... [id=59e25378-3850-47d9-bfa3-18aec5d2bef3]
keycloak_ldap_user_attribute_mapper.cmu_ldap_modify_date: Refreshing state... [id=5618310c-00e4-4bec-9e04-3975357268ae]
keycloak_ldap_user_attribute_mapper.cmu_ldap_middle_name: Refreshing state... [id=73050ab4-9a3a-43cd-be03-6eaf2c891113]
keycloak_ldap_user_attribute_mapper.cmu_ldap_last_name: Refreshing state... [id=1bdeb17a-f3b5-4d20-9405-f18950582ec9]
keycloak_ldap_user_attribute_mapper.cmu_ldap_username: Refreshing state... [id=4277dde1-b06e-42ff-acf8-5537604cb505]
keycloak_ldap_user_attribute_mapper.cmu_ldap_primary_affiliation: Refreshing state... [id=68cb7c40-51a4-4b5f-b520-617ae560163b]
keycloak_ldap_user_attribute_mapper.cmu_ldap_colleges: Refreshing state... [id=0ad2e74c-edb9-48c8-a7c7-3958d49ca802]
keycloak_ldap_user_attribute_mapper.cmu_ldap_departments: Refreshing state... [id=da295d4b-3ee1-41b2-a9cb-4364c308c4fc]
keycloak_ldap_user_attribute_mapper.cmu_ldap_full_email: Refreshing state... [id=267b1bc1-9714-46d5-85c0-e3b9a120b4da]
keycloak_ldap_user_attribute_mapper.cmu_ldap_creation_date: Refreshing state... [id=e271c3e5-024c-441d-8662-00aff6f95f60]
keycloak_ldap_user_attribute_mapper.cmu_ldap_full_name: Refreshing state... [id=3246c4a5-14c9-444d-ba7d-ab2fa110c38d]
keycloak_ldap_user_attribute_mapper.cmu_ldap_display_name: Refreshing state... [id=ffc86fab-f094-4d62-83a8-9aeffb3b6784]
keycloak_ldap_custom_mapper.cmu_ldap_kerberos_principal: Refreshing state... [id=5f10a23b-84b2-4441-ac93-8042dd701e29]
keycloak_ldap_user_attribute_mapper.cmu_ldap_status: Refreshing state... [id=c4907832-a07a-4c5c-9a36-852b13f90cf6]
keycloak_ldap_user_attribute_mapper.cmu_ldap_level: Refreshing state... [id=981dc6b9-9957-48d2-94f4-c9e8182af115]
keycloak_ldap_user_attribute_mapper.cmu_ldap_first_name: Refreshing state... [id=5545f837-8bb1-4435-8797-a780dfd3c290]
keycloak_ldap_user_attribute_mapper.cmu_ldap_orcid: Refreshing state... [id=66b0d533-9f67-4b17-8bce-d056c3196377]
keycloak_ldap_user_attribute_mapper.cmu_ldap_class: Refreshing state... [id=2f7671ad-081b-497a-b868-e48ba2e1d651]
keycloak_ldap_user_attribute_mapper.cmu_ldap_email: Refreshing state... [id=409b11eb-37ae-4943-9983-7613b0bf392f]
keycloak_custom_identity_provider_mapper.slack_id: Refreshing state... [id=7d6f3768-e0a7-41c2-b252-95d2709c65b7]
keycloak_custom_identity_provider_mapper.slack_email: Refreshing state... [id=ea769c6c-b497-49ec-9a4d-8ba28005e62d]
keycloak_custom_identity_provider_mapper.slack_name: Refreshing state... [id=2e4d5410-12d5-46b3-b3d4-7f5b17ee0556]
keycloak_ldap_user_attribute_mapper.cmu_ldap_affiliations: Refreshing state... [id=d5051889-ed12-4307-ae20-6cb808f988d1]
cloudflare_dns_record.this["idp"]: Refreshing state... [id=76512b10636c34a8230d5618d365d6bc]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
╷
│ Warning: Deprecated Resource
│ 
│   with data.vault_kv_secret_v2.forgejo_idp,
│   on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp:
│   15:       },
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
│ 
│ (and 5 more similar warnings elsewhere)
╵
╷
│ Warning: Value derived from a deprecated source
│ 
│   with keycloak_ldap_user_federation.cmu,
│   on config.tf.json line 423, in resource.keycloak_ldap_user_federation.cmu:
│  423:         "vendor": "AD"
│ 
│ This value is derived from data.vault_kv_secret_v2.keycloak_ldap, which is
│ deprecated with the following message:
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
│ 
│ (and 2 more similar warnings elsewhere)
╵

• ▶️ To apply this plan, comment:

  atlantis apply -p keycloak
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p keycloak
  

No changes. Your infrastructure matches the configuration.

---

14. project: vaultwarden dir: . workspace: vaultwarden

Show Output

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/1dc5f37a45023db6482bfb4c4bd57cbe8f4021bd83bb635c5b6c27746301ffb4.sqlite' is busy


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing cloudflare/cloudflare v5.25.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing keycloak/keycloak v5.9.0 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.9.0 (unauthenticated)
- Using keycloak/keycloak v5.9.0 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.25.0 (unauthenticated)
- Using cloudflare/cloudflare v5.25.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["vault"]: Refreshing state... [id=7828e0eeb9e7f251c797f565828a47f6]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.

• ▶️ To apply this plan, comment:

  atlantis apply -p vaultwarden
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p vaultwarden
  

No changes. Your infrastructure matches the configuration.

---

15. project: webhook dir: . workspace: webhook

Show Output

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/1dc5f37a45023db6482bfb4c4bd57cbe8f4021bd83bb635c5b6c27746301ffb4.sqlite' is busy


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing cloudflare/cloudflare v5.25.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing keycloak/keycloak v5.9.0 to the shared cache directory...
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.9.0 (unauthenticated)
- Using keycloak/keycloak v5.9.0 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.25.0 (unauthenticated)
- Using cloudflare/cloudflare v5.25.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["webhooks"]: Refreshing state... [id=0ec7b1a8c64ceb6e83ded9a5842a1198]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.

• ▶️ To apply this plan, comment:

  atlantis apply -p webhook
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p webhook
  

No changes. Your infrastructure matches the configuration.

---

16. project: openbao dir: . workspace: openbao

Show Output

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/1dc5f37a45023db6482bfb4c4bd57cbe8f4021bd83bb635c5b6c27746301ffb4.sqlite' is busy
this derivation will be built:
  /nix/store/kk6781676s2qid5w7kq0br8d6x9kx715-config.tf.json.drv
these 8 paths will be fetched (1.4 MiB download, 14.0 MiB unpacked):
  /nix/store/b8xvzgd52jby5dfpi0pf46nisy6wma5d-diffutils-3.12
  /nix/store/fv9yl55hkskpc2cj9c0sdyq91car9kgl-file-5.48
  /nix/store/n8k0wza75nmrx08civlj29h26scx2fjh-gnu-config-2024-01-01
  /nix/store/c011mk580m964s1zxjccvdax3fcmppnl-gnumake-4.4.1
  /nix/store/6yfz5ayq5c8nhhf4bb2fs6d72wmkpz99-jq-1.8.2-dev
  /nix/store/h9wq5kdv1jc9hxmwgn9vh9bwsigmnsj6-patchelf-0.15.2
  /nix/store/c29a7xzhhv8nk62w1gls6f6jj8zihggv-stdenv-linux-no-cc
  /nix/store/rjri54xd29c5qfwj124j62ffzjjigjmh-update-autotools-gnu-config-scripts-hook
copying path '/nix/store/6yfz5ayq5c8nhhf4bb2fs6d72wmkpz99-jq-1.8.2-dev' from 'http://localhost:5000'...
copying path '/nix/store/c011mk580m964s1zxjccvdax3fcmppnl-gnumake-4.4.1' from 'http://localhost:5000'...
copying path '/nix/store/b8xvzgd52jby5dfpi0pf46nisy6wma5d-diffutils-3.12' from 'http://localhost:5000'...
copying path '/nix/store/h9wq5kdv1jc9hxmwgn9vh9bwsigmnsj6-patchelf-0.15.2' from 'http://localhost:5000'...
copying path '/nix/store/n8k0wza75nmrx08civlj29h26scx2fjh-gnu-config-2024-01-01' from 'http://localhost:5000'...
copying path '/nix/store/fv9yl55hkskpc2cj9c0sdyq91car9kgl-file-5.48' from 'http://localhost:5000'...
copying path '/nix/store/rjri54xd29c5qfwj124j62ffzjjigjmh-update-autotools-gnu-config-scripts-hook' from 'http://localhost:5000'...
copying path '/nix/store/c29a7xzhhv8nk62w1gls6f6jj8zihggv-stdenv-linux-no-cc' from 'http://localhost:5000'...
building '/nix/store/kk6781676s2qid5w7kq0br8d6x9kx715-config.tf.json.drv'...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing cloudflare/cloudflare v5.25.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing keycloak/keycloak v5.9.0 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed keycloak/keycloak v5.9.0 (unauthenticated)
- Using keycloak/keycloak v5.9.0 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.25.0 (unauthenticated)
- Using cloudflare/cloudflare v5.25.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
vault_policy.shared_read: Refreshing state... [id=shared-read]
vault_policy.ci: Refreshing state... [id=ci]
vault_policy.infra: Refreshing state... [id=infra]
vault_policy.devops: Refreshing state... [id=devops]
vault_auth_backend.approle: Refreshing state... [id=approle]
vault_mount.kv: Refreshing state... [id=secret]
vault_jwt_auth_backend.forgejo: Refreshing state... [id=jwt]
vault_identity_group.all_members: Refreshing state... [id=17a94032-1dfa-8c66-af1f-ac3942f8d13f]
vault_identity_group.devops: Refreshing state... [id=6922ccb6-70c2-acef-0580-49477441e3ff]
vault_kv_secret_v2.cachix: Refreshing state... [id=secret/data/shared/cachix]
vault_approle_auth_backend_role.host["infra-01"]: Refreshing state... [id=auth/approle/role/infra-01]
vault_approle_auth_backend_role.host["signage-01"]: Refreshing state... [id=auth/approle/role/signage-01]
vault_approle_auth_backend_role.host["deploy-01"]: Refreshing state... [id=auth/approle/role/deploy-01]
vault_approle_auth_backend_role.host["snoopy"]: Refreshing state... [id=auth/approle/role/snoopy]
vault_jwt_auth_backend_role.ci: Refreshing state... [id=auth/jwt/role/ci]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.openbao: Refreshing state... [id=86926066-77c5-458e-be5a-cb585b75c818]
data.cloudflare_zones.all: Reading...
vault_jwt_auth_backend.oidc: Refreshing state... [id=oidc]
keycloak_openid_group_membership_protocol_mapper.openbao_groups: Refreshing state... [id=cafd878e-dbc6-4376-95de-f09c2e5b9870]
vault_identity_group_alias.all_members: Refreshing state... [id=3371c9f2-3d4b-eafe-20e5-f2bfed63fdb9]
vault_identity_group_alias.devops: Refreshing state... [id=f7f8c2b9-125e-5c92-efda-361e93cd2d2a]
vault_jwt_auth_backend_role.default: Refreshing state... [id=auth/oidc/role/default]
data.cloudflare_zones.all: Read complete after 2s
cloudflare_dns_record.this["secrets"]: Refreshing state... [id=c24ad8899e7a3b573f1d2d7b95711926]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.

• ▶️ To apply this plan, comment:

  atlantis apply -p openbao
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p openbao
  

No changes. Your infrastructure matches the configuration.

---

17. project: hosts dir: . workspace: hosts

Show Output

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/1dc5f37a45023db6482bfb4c4bd57cbe8f4021bd83bb635c5b6c27746301ffb4.sqlite' is busy
copying path '/nix/store/8bhhaac4n9nd6z3ickg9fwkv0b1plp5g-source' from 'http://localhost:5000'...
copying path '/nix/store/8ggr67sci43hlp8ba6rhjrdhhj5490am-source' from 'http://localhost:5000'...
this derivation will be built:
  /nix/store/r8crnc27ljxid9ik7mfyjnd0gq4dj2jr-config.tf.json.drv
this path will be fetched (18.7 KiB download, 60.0 KiB unpacked):
  /nix/store/c29a7xzhhv8nk62w1gls6f6jj8zihggv-stdenv-linux-no-cc
copying path '/nix/store/c29a7xzhhv8nk62w1gls6f6jj8zihggv-stdenv-linux-no-cc' from 'http://localhost:5000'...
building '/nix/store/r8crnc27ljxid9ik7mfyjnd0gq4dj2jr-config.tf.json.drv'...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing cloudflare/cloudflare v5.25.0 to the shared cache directory...
- Installing keycloak/keycloak v5.9.0 to the shared cache directory...
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.9.0 (unauthenticated)
- Using keycloak/keycloak v5.9.0 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.25.0 (unauthenticated)
- Using cloudflare/cloudflare v5.25.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Read complete after 2s
cloudflare_dns_record.this["signage-01"]: Refreshing state... [id=a80079e44697aebac2cbda4ab85a79ee]
cloudflare_dns_record.this["infra-01"]: Refreshing state... [id=30f50d5655d03d54b472480be1476c1c]
cloudflare_dns_record.this["deploy-01"]: Refreshing state... [id=bcb794198cc3e1ad25e3707e3af7fd1d]
cloudflare_dns_record.this["snoopy"]: Refreshing state... [id=7f849c841bba1c0d46009308acaf7f55]
cloudflare_dns_record.this["infra-02"]: Refreshing state... [id=1856c054b772a4ac62e0f53625163997]
cloudflare_zone_setting.always_use_https["98d2138c49ff1067e6fc6146febadcca"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["3b8197fed31cd2c5f52b2bbbe8b1fa0f"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["9ae67b02fb7f5a546a8fd18527115ea5"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["261d3e0e93bb02ae1e6f31c7b09c6441"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["78a8413b3e73553f7def8cefe1bdc386"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["50f297e4046f66a46bcb445f9b92f2c3"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["a0686a6fe9f1e181d0c1dcdf9c293a9b"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["97416783adc55489c6f601bbfaa48936"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["03d47c74036171bb4a0ad2679adf7ca5"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["5ec9401ebede43c78ad0167fefd3b862"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["4585d8c6e8c50f8e8450c220783d6cc3"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["b485862979e222b68b5980cc50e8c63b"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["d8546107eab7e3bf8d413759c28b66c2"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["acfb686acc0532474d7f379317afb648"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["55c7eec3f2a44b6b943962682d1d1953"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["ab365d7cec88f972e0b26bf59afd174f"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["706d92947e0941effeffd392637f97a2"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["c304ee4431d1d2c0313343aff8ffc338"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["2bf8696c7e2fdc56f9b9e98443f001cc"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["2d4a1424a61322658b5e478b6f563e26"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["5c2e7faf46bf72319da6cdffadca7f43"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["dfe11e930ca4ef3d94cd9f79072315cd"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["dbedf6cff671263c0d6f69b482895ee4"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["a3c2419a7e47cdc909022c5815310013"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["c46bbc75077117690939c20f203a3c00"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["9746fc8415923e40c5961ad58708e7f6"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["6a38c25604c09abe30baff7e2176a673"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["90331dc9edd007e59c828faa3b8d73a9"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["eacdf87531ae2114049a9585ab73ef9d"]: Refreshing state... [id=always_use_https]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.

• ▶️ To apply this plan, comment:

  atlantis apply -p hosts
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p hosts
  

No changes. Your infrastructure matches the configuration.

---

Plan Summary

17 projects, 0 with changes, 17 with no changes, 0 failed

• ⏩ To apply all unapplied plans from this Pull Request, comment:

  atlantis apply
  

• 🚮 To delete all plans and locks from this Pull Request, comment:

  atlantis unlock
  

Ran Plan for 17 projects: 1. project: `forgejo` dir: `.` workspace: `forgejo` 1. project: `posthog` dir: `.` workspace: `posthog` 1. project: `snot` dir: `.` workspace: `snot` 1. project: `governance` dir: `.` workspace: `governance` 1. project: `matrix` dir: `.` workspace: `matrix` 1. project: `headscale` dir: `.` workspace: `headscale` 1. project: `litellm` dir: `.` workspace: `litellm` 1. project: `kennel` dir: `.` workspace: `kennel` 1. project: `observability` dir: `.` workspace: `observability` 1. project: `ricochet` dir: `.` workspace: `ricochet` 1. project: `atlantis` dir: `.` workspace: `atlantis` 1. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin` 1. project: `keycloak` dir: `.` workspace: `keycloak` 1. project: `vaultwarden` dir: `.` workspace: `vaultwarden` 1. project: `webhook` dir: `.` workspace: `webhook` 1. project: `openbao` dir: `.` workspace: `openbao` 1. project: `hosts` dir: `.` workspace: `hosts` --- ### 1. project: `forgejo` dir: `.` workspace: `forgejo` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/1dc5f37a45023db6482bfb4c4bd57cbe8f4021bd83bb635c5b6c27746301ffb4.sqlite' is busy Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding keycloak/keycloak versions matching "~> 5.0"... - Installing cloudflare/cloudflare v5.25.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing keycloak/keycloak v5.9.0 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed keycloak/keycloak v5.9.0 (unauthenticated) - Using keycloak/keycloak v5.9.0 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.25.0 (unauthenticated) - Using cloudflare/cloudflare v5.25.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ garage_bucket.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960] garage_key.forgejo: Refreshing state... [id=GKea9810d648000e3e3b8df725] garage_bucket_permission.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960/GKea9810d648000e3e3b8df725] vault_kv_secret_v2.forgejo_storage: Refreshing state... [id=secret/data/infra/forgejo-storage] data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.forgejo: Refreshing state... [id=110b9b02-18e1-4bac-b5ce-936bbfbc83d6] keycloak_openid_group_membership_protocol_mapper.forgejo_groups: Refreshing state... [id=72c7154f-372d-4a39-97c0-6516a88d6198] vault_kv_secret_v2.forgejo_oidc: Refreshing state... [id=secret/data/infra/forgejo-oidc] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["git"]: Refreshing state... [id=f0fa6f4acf6bf381474c1a9304225f68] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p forgejo ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fforgejo%252Fforgejo) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p forgejo ``` No changes. Your infrastructure matches the configuration. --- ### 2. project: `posthog` dir: `.` workspace: `posthog` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/1dc5f37a45023db6482bfb4c4bd57cbe8f4021bd83bb635c5b6c27746301ffb4.sqlite' is busy Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Installing cloudflare/cloudflare v5.25.0 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing keycloak/keycloak v5.9.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed keycloak/keycloak v5.9.0 (unauthenticated) - Using keycloak/keycloak v5.9.0 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.25.0 (unauthenticated) - Using cloudflare/cloudflare v5.25.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Reading... data.cloudflare_zones.all: Read complete after 0s cloudflare_dns_record.this["v"]: Refreshing state... [id=a34d75a85d3128693767b2db9b7f233e] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p posthog ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fposthog%252Fposthog) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p posthog ``` No changes. Your infrastructure matches the configuration. --- ### 3. project: `snot` dir: `.` workspace: `snot` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/1dc5f37a45023db6482bfb4c4bd57cbe8f4021bd83bb635c5b6c27746301ffb4.sqlite' is busy Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing cloudflare/cloudflare v5.25.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing keycloak/keycloak v5.9.0 to the shared cache directory... - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.9.0 (unauthenticated) - Using keycloak/keycloak v5.9.0 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.25.0 (unauthenticated) - Using cloudflare/cloudflare v5.25.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Read complete after 2s cloudflare_dns_record.this["knot"]: Refreshing state... [id=264276915648465296ad9d24fb70a29b] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p snot ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fsnot%252Fsnot) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p snot ``` No changes. Your infrastructure matches the configuration. --- ### 4. project: `governance` dir: `.` workspace: `governance` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/1dc5f37a45023db6482bfb4c4bd57cbe8f4021bd83bb635c5b6c27746301ffb4.sqlite' is busy Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing keycloak/keycloak v5.9.0 to the shared cache directory... - Installing cloudflare/cloudflare v5.25.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed keycloak/keycloak v5.9.0 (unauthenticated) - Using keycloak/keycloak v5.9.0 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.25.0 (unauthenticated) - Using cloudflare/cloudflare v5.25.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] vault_kv_secret_v2.governance_ci_bot_token: Refreshing state... [id=secret/data/secretspec/governance/ci/BOT_TOKEN] vault_policy.governance: Refreshing state... [id=governance] keycloak_openid_client.governance_cli: Refreshing state... [id=f19d0308-19a8-4fc4-aa5f-f909fc38c5fe] data.keycloak_openid_client.realm_management: Reading... vault_approle_auth_backend_role.governance: Refreshing state... [id=auth/approle/role/governance] vault_kv_secret_v2.governance_ci_keycloak_client_id: Refreshing state... [id=secret/data/secretspec/governance/ci/KEYCLOAK_CLIENT_ID] vault_kv_secret_v2.governance_ci_keycloak_client_secret: Refreshing state... [id=secret/data/secretspec/governance/ci/KEYCLOAK_CLIENT_SECRET] data.keycloak_openid_client.realm_management: Read complete after 0s [id=a0a15f13-b554-4bed-9fb2-3e63e0301278] keycloak_openid_client_service_account_role.governance_cli_realm_management["manage-clients"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/366f6242-2ce3-4be8-b861-3561e3c4b865] keycloak_openid_client_service_account_role.governance_cli_realm_management["manage-users"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/eb96eb71-82eb-4317-b8f5-326472e11484] keycloak_openid_client_service_account_role.governance_cli_realm_management["query-clients"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/16d40468-7ba1-4f17-ba0d-0741880f291a] keycloak_openid_client_service_account_role.governance_cli_realm_management["view-users"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/65f4c673-fc55-430c-b4b6-fd14ed151966] data.cloudflare_zones.all: Read complete after 2s No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p governance ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fgovernance%252Fgovernance) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p governance ``` No changes. Your infrastructure matches the configuration. --- ### 5. project: `matrix` dir: `.` workspace: `matrix` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/1dc5f37a45023db6482bfb4c4bd57cbe8f4021bd83bb635c5b6c27746301ffb4.sqlite' is busy copying path '/nix/store/adcpmshidndclaz4dxjsgklrx3gqhaxp-source' from 'http://localhost:5000'... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing cloudflare/cloudflare v5.25.0 to the shared cache directory... - Installing keycloak/keycloak v5.9.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.9.0 (unauthenticated) - Using keycloak/keycloak v5.9.0 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.25.0 (unauthenticated) - Using cloudflare/cloudflare v5.25.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["matrix"]: Refreshing state... [id=c37d2e1a4edf950b4af4544574c159a8] cloudflare_dns_record.this["@"]: Refreshing state... [id=63ff3b423afd444f8bd31201db232ada] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p matrix ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fmatrix%252Fmatrix) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p matrix ``` No changes. Your infrastructure matches the configuration. --- ### 6. project: `headscale` dir: `.` workspace: `headscale` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/1dc5f37a45023db6482bfb4c4bd57cbe8f4021bd83bb635c5b6c27746301ffb4.sqlite' is busy copying path '/nix/store/61snslw9vdr3ynq1sx7rmvqxcd4v43iv-source' from 'http://localhost:5000'... copying path '/nix/store/8bhhaac4n9nd6z3ickg9fwkv0b1plp5g-source' from 'http://localhost:5000'... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing keycloak/keycloak v5.9.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing cloudflare/cloudflare v5.25.0 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed keycloak/keycloak v5.9.0 (unauthenticated) - Using keycloak/keycloak v5.9.0 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.25.0 (unauthenticated) - Using cloudflare/cloudflare v5.25.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.headplane_cookie: Refreshing state... [id=none] vault_kv_secret_v2.headplane_cookie: Refreshing state... [id=secret/data/infra/headplane-cookie] data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.headscale: Refreshing state... [id=f2875c14-dfff-4fd4-b60b-4d1e066aaeb8] keycloak_openid_client.headplane: Refreshing state... [id=40d2dbf9-409b-4edc-974c-85d5e939efac] vault_kv_secret_v2.headscale_oidc: Refreshing state... [id=secret/data/infra/headscale-oidc] keycloak_openid_group_membership_protocol_mapper.headscale_groups: Refreshing state... [id=f091397a-9b6e-4887-9913-12fb542d7210] vault_kv_secret_v2.headplane_oidc: Refreshing state... [id=secret/data/infra/headplane-oidc] keycloak_openid_group_membership_protocol_mapper.headplane_groups: Refreshing state... [id=fd683ca7-ed77-44f1-b3cc-47241ccb6fb7] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["headplane"]: Refreshing state... [id=9139cfa1f058db85d837defe0460fd20] cloudflare_dns_record.this["headscale"]: Refreshing state... [id=4207dabef0c8dc1972f9d5aa1cd17a00] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p headscale ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fheadscale%252Fheadscale) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p headscale ``` No changes. Your infrastructure matches the configuration. --- ### 7. project: `litellm` dir: `.` workspace: `litellm` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/1dc5f37a45023db6482bfb4c4bd57cbe8f4021bd83bb635c5b6c27746301ffb4.sqlite' is busy copying path '/nix/store/adcpmshidndclaz4dxjsgklrx3gqhaxp-source' from 'http://localhost:5000'... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing cloudflare/cloudflare v5.25.0 to the shared cache directory... - Installing keycloak/keycloak v5.9.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.9.0 (unauthenticated) - Using keycloak/keycloak v5.9.0 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.25.0 (unauthenticated) - Using cloudflare/cloudflare v5.25.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.litellm_salt_key: Refreshing state... [id=none] random_password.litellm_master_key: Refreshing state... [id=none] random_password.cli_proxy_api_key: Refreshing state... [id=none] vault_kv_secret_v2.litellm_master_key: Refreshing state... [id=secret/data/infra/litellm-master-key] vault_kv_secret_v2.cli_proxy_api_key: Refreshing state... [id=secret/data/infra/cli-proxy-api-key] vault_kv_secret_v2.litellm_salt_key: Refreshing state... [id=secret/data/infra/litellm-salt-key] data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.litellm: Refreshing state... [id=4ee5ecdd-c370-4a52-93ae-744332e0a509] keycloak_openid_group_membership_protocol_mapper.litellm_groups: Refreshing state... [id=b2e932af-b3e8-4cac-a6ea-027c1022a22f] vault_kv_secret_v2.litellm_oidc: Refreshing state... [id=secret/data/infra/litellm-oidc] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["litellm"]: Refreshing state... [id=0fa6e5399aa6a69d978d6d425ca14f44] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p litellm ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Flitellm%252Flitellm) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p litellm ``` No changes. Your infrastructure matches the configuration. --- ### 8. project: `kennel` dir: `.` workspace: `kennel` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/1dc5f37a45023db6482bfb4c4bd57cbe8f4021bd83bb635c5b6c27746301ffb4.sqlite' is busy copying path '/nix/store/8bhhaac4n9nd6z3ickg9fwkv0b1plp5g-source' from 'http://localhost:5000'... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing cloudflare/cloudflare v5.25.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing keycloak/keycloak v5.9.0 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installed keycloak/keycloak v5.9.0 (unauthenticated) - Using keycloak/keycloak v5.9.0 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.25.0 (unauthenticated) - Using cloudflare/cloudflare v5.25.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ vault_policy.kennel: Refreshing state... [id=kennel] vault_approle_auth_backend_role.kennel: Refreshing state... [id=auth/approle/role/kennel] data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Read complete after 2s cloudflare_dns_record.this["*"]: Refreshing state... [id=2d4b06ae1c39a5d196a27114e07c97e9] cloudflare_dns_record.this["s3.kennel"]: Refreshing state... [id=d3acfc0e5ca45e0704c40d9e3fa2e60f] cloudflare_dns_record.this["kennel"]: Refreshing state... [id=a34066db99519085f24a01cebcb25d69] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p kennel ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fkennel%252Fkennel) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p kennel ``` No changes. Your infrastructure matches the configuration. --- ### 9. project: `observability` dir: `.` workspace: `observability` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/1dc5f37a45023db6482bfb4c4bd57cbe8f4021bd83bb635c5b6c27746301ffb4.sqlite' is busy copying path '/nix/store/8bhhaac4n9nd6z3ickg9fwkv0b1plp5g-source' from 'http://localhost:5000'... copying path '/nix/store/adcpmshidndclaz4dxjsgklrx3gqhaxp-source' from 'http://localhost:5000'... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding hashicorp/random versions matching "~> 3.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Installing cloudflare/cloudflare v5.25.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing keycloak/keycloak v5.9.0 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.9.0 (unauthenticated) - Using keycloak/keycloak v5.9.0 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.25.0 (unauthenticated) - Using cloudflare/cloudflare v5.25.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.grafana_secret_key: Refreshing state... [id=none] vault_kv_secret_v2.grafana_secret_key: Refreshing state... [id=secret/data/infra/grafana-secret-key] data.cloudflare_zones.all: Reading... garage_key.tempo: Refreshing state... [id=GK9769dcb3b38a1ae26ac62b3c] garage_bucket.loki_chunks: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3] garage_key.loki: Refreshing state... [id=GKeed8ed294debe12a38bbd470] garage_bucket.tempo_traces: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c] vault_kv_secret_v2.loki_s3: Refreshing state... [id=secret/data/infra/loki-s3] garage_bucket_permission.loki: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3/GKeed8ed294debe12a38bbd470] vault_kv_secret_v2.tempo_s3: Refreshing state... [id=secret/data/infra/tempo-s3] garage_bucket_permission.tempo: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c/GK9769dcb3b38a1ae26ac62b3c] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.grafana: Refreshing state... [id=527e25bc-77c3-43d5-ac28-32aa2f21fa9c] keycloak_openid_group_membership_protocol_mapper.grafana_groups: Refreshing state... [id=5c54e939-7a03-4857-93f5-437ca25e206e] vault_kv_secret_v2.grafana_oidc: Refreshing state... [id=secret/data/infra/grafana-oidc] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["uptime"]: Refreshing state... [id=0909f2bd8ade5d54a53b58a2a3fef540] cloudflare_dns_record.this["grafana"]: Refreshing state... [id=9924f9e66892a5aeafe09ed0128a65a0] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p observability ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fobservability%252Fobservability) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p observability ``` No changes. Your infrastructure matches the configuration. --- ### 10. project: `ricochet` dir: `.` workspace: `ricochet` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/1dc5f37a45023db6482bfb4c4bd57cbe8f4021bd83bb635c5b6c27746301ffb4.sqlite' is busy copying path '/nix/store/8bhhaac4n9nd6z3ickg9fwkv0b1plp5g-source' from 'http://localhost:5000'... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing cloudflare/cloudflare v5.25.0 to the shared cache directory... - Installing keycloak/keycloak v5.9.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed keycloak/keycloak v5.9.0 (unauthenticated) - Using keycloak/keycloak v5.9.0 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.25.0 (unauthenticated) - Using cloudflare/cloudflare v5.25.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 1s [id=scottylabs] data.cloudflare_zones.all: Reading... data.cloudflare_zones.all: Read complete after 0s cloudflare_dns_record.this["oauth"]: Refreshing state... [id=346fac8950e4873a27d5cfb72104783d] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p ricochet ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fricochet%252Fricochet) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p ricochet ``` No changes. Your infrastructure matches the configuration. --- ### 11. project: `atlantis` dir: `.` workspace: `atlantis` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it copying path '/nix/store/8bhhaac4n9nd6z3ickg9fwkv0b1plp5g-source' from 'http://localhost:5000'... copying path '/nix/store/adcpmshidndclaz4dxjsgklrx3gqhaxp-source' from 'http://localhost:5000'... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding hashicorp/random versions matching "~> 3.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding svalabs/forgejo versions matching "~> 1.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding keycloak/keycloak versions matching "~> 5.0"... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing cloudflare/cloudflare v5.25.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing keycloak/keycloak v5.9.0 to the shared cache directory... - Installing svalabs/forgejo v1.6.1 to the shared cache directory... - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed keycloak/keycloak v5.9.0 (unauthenticated) - Using keycloak/keycloak v5.9.0 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed svalabs/forgejo v1.6.1 (unauthenticated) - Using svalabs/forgejo v1.6.1 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.25.0 (unauthenticated) - Using cloudflare/cloudflare v5.25.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ - svalabs/forgejo │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.atlantis_webhook_secret: Refreshing state... [id=none] vault_kv_secret_v2.atlantis_webhook: Refreshing state... [id=secret/data/infra/atlantis] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.forgejo_repository.infrastructure: Reading... data.forgejo_repository.governance: Reading... data.forgejo_repository.infrastructure: Read complete after 0s [name=infrastructure] data.forgejo_repository.governance: Read complete after 0s [name=governance] forgejo_repository_webhook.infrastructure: Refreshing state... forgejo_repository_webhook.governance: Refreshing state... data.cloudflare_zones.all: Reading... data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["atlantis"]: Refreshing state... [id=d0419d10a0c0bb715bcbadc7a1c73cbb] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p atlantis ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fatlantis%252Fatlantis) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p atlantis ``` No changes. Your infrastructure matches the configuration. --- ### 12. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/1dc5f37a45023db6482bfb4c4bd57cbe8f4021bd83bb635c5b6c27746301ffb4.sqlite' is busy Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing keycloak/keycloak v5.9.0 to the shared cache directory... - Installing cloudflare/cloudflare v5.25.0 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.9.0 (unauthenticated) - Using keycloak/keycloak v5.9.0 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.25.0 (unauthenticated) - Using cloudflare/cloudflare v5.25.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... random_password.garage_webadmin_jwt: Refreshing state... [id=none] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.garage_webadmin: Refreshing state... [id=a48c9f66-cde3-463d-970c-b2d7de716185] vault_kv_secret_v2.garage_webadmin_oidc: Refreshing state... [id=secret/data/infra/garage-webadmin-oidc] keycloak_openid_group_membership_protocol_mapper.garage_webadmin_groups: Refreshing state... [id=a86e928b-6c7a-4081-a291-637e752fbabf] vault_kv_secret_v2.garage_webadmin_jwt: Refreshing state... [id=secret/data/infra/garage-webadmin-jwt] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["garage"]: Refreshing state... [id=4054146ceff1515773704f89136b25f1] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p garage-webadmin ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fgarage-webadmin%252Fgarage-webadmin) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p garage-webadmin ``` No changes. Your infrastructure matches the configuration. --- ### 13. project: `keycloak` dir: `.` workspace: `keycloak` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/1dc5f37a45023db6482bfb4c4bd57cbe8f4021bd83bb635c5b6c27746301ffb4.sqlite' is busy copying path '/nix/store/8bhhaac4n9nd6z3ickg9fwkv0b1plp5g-source' from 'http://localhost:5000'... this derivation will be built: /nix/store/j8xy1cwgkm41gvdqsjifiwn8lwxhh264-config.tf.json.drv building '/nix/store/j8xy1cwgkm41gvdqsjifiwn8lwxhh264-config.tf.json.drv'... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Installing cloudflare/cloudflare v5.25.0 to the shared cache directory... - Installing keycloak/keycloak v5.9.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed keycloak/keycloak v5.9.0 (unauthenticated) - Using keycloak/keycloak v5.9.0 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.25.0 (unauthenticated) - Using cloudflare/cloudflare v5.25.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_saml_identity_provider.cmu_saml: Refreshing state... [id=cmu-saml] keycloak_realm_user_profile.scottylabs: Refreshing state... [id=scottylabs] keycloak_custom_identity_provider_mapper.cmu_saml_username: Refreshing state... [id=32fed5ec-b30e-4b69-90a3-64c58f592ded] data.vault_kv_secret_v2.keycloak_idp: Reading... data.vault_kv_secret_v2.forgejo_idp: Reading... data.vault_kv_secret_v2.keycloak_ldap: Reading... data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp] data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp] data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap] keycloak_oidc_google_identity_provider.google: Refreshing state... [id=google] keycloak_oidc_identity_provider.cmu: Refreshing state... [id=cmu] keycloak_oidc_identity_provider.slack: Refreshing state... [id=slack] keycloak_oidc_identity_provider.cmu_git: Refreshing state... [id=cmu-dev] keycloak_ldap_user_federation.cmu: Refreshing state... [id=TtPPdhQJRUSFFwr_nJ2gcA] keycloak_custom_identity_provider_mapper.google_id: Refreshing state... [id=eda09ecd-d9ce-4ab0-a585-8f7d45dff7de] keycloak_custom_identity_provider_mapper.google_name: Refreshing state... [id=9d5c678f-df91-493d-a575-be1ce56a34e0] keycloak_custom_identity_provider_mapper.google_email: Refreshing state... [id=ab2117f2-dcbf-4409-a7b7-c7354317e6cc] keycloak_custom_identity_provider_mapper.cmu_username: Refreshing state... [id=65d1857d-19e5-4db5-940c-7751b770b4ac] data.cloudflare_zones.all: Read complete after 1s keycloak_custom_identity_provider_mapper.cmudev_email: Refreshing state... [id=2763e7d7-f102-479e-a560-41704bcf5e4b] keycloak_custom_identity_provider_mapper.cmudev_name: Refreshing state... [id=17703dd7-f88f-4d6b-88f0-e7561e796c8f] keycloak_custom_identity_provider_mapper.cmudev_id: Refreshing state... [id=5944bfd3-9704-482e-ac25-c41a40351cd7] keycloak_custom_identity_provider_mapper.cmudev_username: Refreshing state... [id=8f04fb48-8434-43d6-accd-5b3a1e48e9b2] keycloak_ldap_msad_user_account_control_mapper.cmu_ldap_msad: Refreshing state... [id=59e25378-3850-47d9-bfa3-18aec5d2bef3] keycloak_ldap_user_attribute_mapper.cmu_ldap_modify_date: Refreshing state... [id=5618310c-00e4-4bec-9e04-3975357268ae] keycloak_ldap_user_attribute_mapper.cmu_ldap_middle_name: Refreshing state... [id=73050ab4-9a3a-43cd-be03-6eaf2c891113] keycloak_ldap_user_attribute_mapper.cmu_ldap_last_name: Refreshing state... [id=1bdeb17a-f3b5-4d20-9405-f18950582ec9] keycloak_ldap_user_attribute_mapper.cmu_ldap_username: Refreshing state... [id=4277dde1-b06e-42ff-acf8-5537604cb505] keycloak_ldap_user_attribute_mapper.cmu_ldap_primary_affiliation: Refreshing state... [id=68cb7c40-51a4-4b5f-b520-617ae560163b] keycloak_ldap_user_attribute_mapper.cmu_ldap_colleges: Refreshing state... [id=0ad2e74c-edb9-48c8-a7c7-3958d49ca802] keycloak_ldap_user_attribute_mapper.cmu_ldap_departments: Refreshing state... [id=da295d4b-3ee1-41b2-a9cb-4364c308c4fc] keycloak_ldap_user_attribute_mapper.cmu_ldap_full_email: Refreshing state... [id=267b1bc1-9714-46d5-85c0-e3b9a120b4da] keycloak_ldap_user_attribute_mapper.cmu_ldap_creation_date: Refreshing state... [id=e271c3e5-024c-441d-8662-00aff6f95f60] keycloak_ldap_user_attribute_mapper.cmu_ldap_full_name: Refreshing state... [id=3246c4a5-14c9-444d-ba7d-ab2fa110c38d] keycloak_ldap_user_attribute_mapper.cmu_ldap_display_name: Refreshing state... [id=ffc86fab-f094-4d62-83a8-9aeffb3b6784] keycloak_ldap_custom_mapper.cmu_ldap_kerberos_principal: Refreshing state... [id=5f10a23b-84b2-4441-ac93-8042dd701e29] keycloak_ldap_user_attribute_mapper.cmu_ldap_status: Refreshing state... [id=c4907832-a07a-4c5c-9a36-852b13f90cf6] keycloak_ldap_user_attribute_mapper.cmu_ldap_level: Refreshing state... [id=981dc6b9-9957-48d2-94f4-c9e8182af115] keycloak_ldap_user_attribute_mapper.cmu_ldap_first_name: Refreshing state... [id=5545f837-8bb1-4435-8797-a780dfd3c290] keycloak_ldap_user_attribute_mapper.cmu_ldap_orcid: Refreshing state... [id=66b0d533-9f67-4b17-8bce-d056c3196377] keycloak_ldap_user_attribute_mapper.cmu_ldap_class: Refreshing state... [id=2f7671ad-081b-497a-b868-e48ba2e1d651] keycloak_ldap_user_attribute_mapper.cmu_ldap_email: Refreshing state... [id=409b11eb-37ae-4943-9983-7613b0bf392f] keycloak_custom_identity_provider_mapper.slack_id: Refreshing state... [id=7d6f3768-e0a7-41c2-b252-95d2709c65b7] keycloak_custom_identity_provider_mapper.slack_email: Refreshing state... [id=ea769c6c-b497-49ec-9a4d-8ba28005e62d] keycloak_custom_identity_provider_mapper.slack_name: Refreshing state... [id=2e4d5410-12d5-46b3-b3d4-7f5b17ee0556] keycloak_ldap_user_attribute_mapper.cmu_ldap_affiliations: Refreshing state... [id=d5051889-ed12-4307-ae20-6cb808f988d1] cloudflare_dns_record.this["idp"]: Refreshing state... [id=76512b10636c34a8230d5618d365d6bc] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ╷ │ Warning: Deprecated Resource │ │ with data.vault_kv_secret_v2.forgejo_idp, │ on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp: │ 15: }, │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead │ │ (and 5 more similar warnings elsewhere) ╵ ╷ │ Warning: Value derived from a deprecated source │ │ with keycloak_ldap_user_federation.cmu, │ on config.tf.json line 423, in resource.keycloak_ldap_user_federation.cmu: │ 423: "vendor": "AD" │ │ This value is derived from data.vault_kv_secret_v2.keycloak_ldap, which is │ deprecated with the following message: │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead │ │ (and 2 more similar warnings elsewhere) ╵ ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p keycloak ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fkeycloak%252Fkeycloak) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p keycloak ``` No changes. Your infrastructure matches the configuration. --- ### 14. project: `vaultwarden` dir: `.` workspace: `vaultwarden` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/1dc5f37a45023db6482bfb4c4bd57cbe8f4021bd83bb635c5b6c27746301ffb4.sqlite' is busy Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing cloudflare/cloudflare v5.25.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing keycloak/keycloak v5.9.0 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.9.0 (unauthenticated) - Using keycloak/keycloak v5.9.0 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.25.0 (unauthenticated) - Using cloudflare/cloudflare v5.25.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["vault"]: Refreshing state... [id=7828e0eeb9e7f251c797f565828a47f6] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p vaultwarden ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fvaultwarden%252Fvaultwarden) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p vaultwarden ``` No changes. Your infrastructure matches the configuration. --- ### 15. project: `webhook` dir: `.` workspace: `webhook` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/1dc5f37a45023db6482bfb4c4bd57cbe8f4021bd83bb635c5b6c27746301ffb4.sqlite' is busy Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing cloudflare/cloudflare v5.25.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing keycloak/keycloak v5.9.0 to the shared cache directory... - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.9.0 (unauthenticated) - Using keycloak/keycloak v5.9.0 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.25.0 (unauthenticated) - Using cloudflare/cloudflare v5.25.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["webhooks"]: Refreshing state... [id=0ec7b1a8c64ceb6e83ded9a5842a1198] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p webhook ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fwebhook%252Fwebhook) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p webhook ``` No changes. Your infrastructure matches the configuration. --- ### 16. project: `openbao` dir: `.` workspace: `openbao` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/1dc5f37a45023db6482bfb4c4bd57cbe8f4021bd83bb635c5b6c27746301ffb4.sqlite' is busy this derivation will be built: /nix/store/kk6781676s2qid5w7kq0br8d6x9kx715-config.tf.json.drv these 8 paths will be fetched (1.4 MiB download, 14.0 MiB unpacked): /nix/store/b8xvzgd52jby5dfpi0pf46nisy6wma5d-diffutils-3.12 /nix/store/fv9yl55hkskpc2cj9c0sdyq91car9kgl-file-5.48 /nix/store/n8k0wza75nmrx08civlj29h26scx2fjh-gnu-config-2024-01-01 /nix/store/c011mk580m964s1zxjccvdax3fcmppnl-gnumake-4.4.1 /nix/store/6yfz5ayq5c8nhhf4bb2fs6d72wmkpz99-jq-1.8.2-dev /nix/store/h9wq5kdv1jc9hxmwgn9vh9bwsigmnsj6-patchelf-0.15.2 /nix/store/c29a7xzhhv8nk62w1gls6f6jj8zihggv-stdenv-linux-no-cc /nix/store/rjri54xd29c5qfwj124j62ffzjjigjmh-update-autotools-gnu-config-scripts-hook copying path '/nix/store/6yfz5ayq5c8nhhf4bb2fs6d72wmkpz99-jq-1.8.2-dev' from 'http://localhost:5000'... copying path '/nix/store/c011mk580m964s1zxjccvdax3fcmppnl-gnumake-4.4.1' from 'http://localhost:5000'... copying path '/nix/store/b8xvzgd52jby5dfpi0pf46nisy6wma5d-diffutils-3.12' from 'http://localhost:5000'... copying path '/nix/store/h9wq5kdv1jc9hxmwgn9vh9bwsigmnsj6-patchelf-0.15.2' from 'http://localhost:5000'... copying path '/nix/store/n8k0wza75nmrx08civlj29h26scx2fjh-gnu-config-2024-01-01' from 'http://localhost:5000'... copying path '/nix/store/fv9yl55hkskpc2cj9c0sdyq91car9kgl-file-5.48' from 'http://localhost:5000'... copying path '/nix/store/rjri54xd29c5qfwj124j62ffzjjigjmh-update-autotools-gnu-config-scripts-hook' from 'http://localhost:5000'... copying path '/nix/store/c29a7xzhhv8nk62w1gls6f6jj8zihggv-stdenv-linux-no-cc' from 'http://localhost:5000'... building '/nix/store/kk6781676s2qid5w7kq0br8d6x9kx715-config.tf.json.drv'... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing cloudflare/cloudflare v5.25.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing keycloak/keycloak v5.9.0 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed keycloak/keycloak v5.9.0 (unauthenticated) - Using keycloak/keycloak v5.9.0 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.25.0 (unauthenticated) - Using cloudflare/cloudflare v5.25.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ vault_policy.shared_read: Refreshing state... [id=shared-read] vault_policy.ci: Refreshing state... [id=ci] vault_policy.infra: Refreshing state... [id=infra] vault_policy.devops: Refreshing state... [id=devops] vault_auth_backend.approle: Refreshing state... [id=approle] vault_mount.kv: Refreshing state... [id=secret] vault_jwt_auth_backend.forgejo: Refreshing state... [id=jwt] vault_identity_group.all_members: Refreshing state... [id=17a94032-1dfa-8c66-af1f-ac3942f8d13f] vault_identity_group.devops: Refreshing state... [id=6922ccb6-70c2-acef-0580-49477441e3ff] vault_kv_secret_v2.cachix: Refreshing state... [id=secret/data/shared/cachix] vault_approle_auth_backend_role.host["infra-01"]: Refreshing state... [id=auth/approle/role/infra-01] vault_approle_auth_backend_role.host["signage-01"]: Refreshing state... [id=auth/approle/role/signage-01] vault_approle_auth_backend_role.host["deploy-01"]: Refreshing state... [id=auth/approle/role/deploy-01] vault_approle_auth_backend_role.host["snoopy"]: Refreshing state... [id=auth/approle/role/snoopy] vault_jwt_auth_backend_role.ci: Refreshing state... [id=auth/jwt/role/ci] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.openbao: Refreshing state... [id=86926066-77c5-458e-be5a-cb585b75c818] data.cloudflare_zones.all: Reading... vault_jwt_auth_backend.oidc: Refreshing state... [id=oidc] keycloak_openid_group_membership_protocol_mapper.openbao_groups: Refreshing state... [id=cafd878e-dbc6-4376-95de-f09c2e5b9870] vault_identity_group_alias.all_members: Refreshing state... [id=3371c9f2-3d4b-eafe-20e5-f2bfed63fdb9] vault_identity_group_alias.devops: Refreshing state... [id=f7f8c2b9-125e-5c92-efda-361e93cd2d2a] vault_jwt_auth_backend_role.default: Refreshing state... [id=auth/oidc/role/default] data.cloudflare_zones.all: Read complete after 2s cloudflare_dns_record.this["secrets"]: Refreshing state... [id=c24ad8899e7a3b573f1d2d7b95711926] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p openbao ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fopenbao%252Fopenbao) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p openbao ``` No changes. Your infrastructure matches the configuration. --- ### 17. project: `hosts` dir: `.` workspace: `hosts` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/1dc5f37a45023db6482bfb4c4bd57cbe8f4021bd83bb635c5b6c27746301ffb4.sqlite' is busy copying path '/nix/store/8bhhaac4n9nd6z3ickg9fwkv0b1plp5g-source' from 'http://localhost:5000'... copying path '/nix/store/8ggr67sci43hlp8ba6rhjrdhhj5490am-source' from 'http://localhost:5000'... this derivation will be built: /nix/store/r8crnc27ljxid9ik7mfyjnd0gq4dj2jr-config.tf.json.drv this path will be fetched (18.7 KiB download, 60.0 KiB unpacked): /nix/store/c29a7xzhhv8nk62w1gls6f6jj8zihggv-stdenv-linux-no-cc copying path '/nix/store/c29a7xzhhv8nk62w1gls6f6jj8zihggv-stdenv-linux-no-cc' from 'http://localhost:5000'... building '/nix/store/r8crnc27ljxid9ik7mfyjnd0gq4dj2jr-config.tf.json.drv'... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing cloudflare/cloudflare v5.25.0 to the shared cache directory... - Installing keycloak/keycloak v5.9.0 to the shared cache directory... - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.9.0 (unauthenticated) - Using keycloak/keycloak v5.9.0 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.25.0 (unauthenticated) - Using cloudflare/cloudflare v5.25.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Read complete after 2s cloudflare_dns_record.this["signage-01"]: Refreshing state... [id=a80079e44697aebac2cbda4ab85a79ee] cloudflare_dns_record.this["infra-01"]: Refreshing state... [id=30f50d5655d03d54b472480be1476c1c] cloudflare_dns_record.this["deploy-01"]: Refreshing state... [id=bcb794198cc3e1ad25e3707e3af7fd1d] cloudflare_dns_record.this["snoopy"]: Refreshing state... [id=7f849c841bba1c0d46009308acaf7f55] cloudflare_dns_record.this["infra-02"]: Refreshing state... [id=1856c054b772a4ac62e0f53625163997] cloudflare_zone_setting.always_use_https["98d2138c49ff1067e6fc6146febadcca"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["3b8197fed31cd2c5f52b2bbbe8b1fa0f"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["9ae67b02fb7f5a546a8fd18527115ea5"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["261d3e0e93bb02ae1e6f31c7b09c6441"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["78a8413b3e73553f7def8cefe1bdc386"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["50f297e4046f66a46bcb445f9b92f2c3"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["a0686a6fe9f1e181d0c1dcdf9c293a9b"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["97416783adc55489c6f601bbfaa48936"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["03d47c74036171bb4a0ad2679adf7ca5"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["5ec9401ebede43c78ad0167fefd3b862"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["4585d8c6e8c50f8e8450c220783d6cc3"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["b485862979e222b68b5980cc50e8c63b"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["d8546107eab7e3bf8d413759c28b66c2"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["acfb686acc0532474d7f379317afb648"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["55c7eec3f2a44b6b943962682d1d1953"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["ab365d7cec88f972e0b26bf59afd174f"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["706d92947e0941effeffd392637f97a2"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["c304ee4431d1d2c0313343aff8ffc338"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["2bf8696c7e2fdc56f9b9e98443f001cc"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["2d4a1424a61322658b5e478b6f563e26"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["5c2e7faf46bf72319da6cdffadca7f43"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["dfe11e930ca4ef3d94cd9f79072315cd"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["dbedf6cff671263c0d6f69b482895ee4"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["a3c2419a7e47cdc909022c5815310013"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["c46bbc75077117690939c20f203a3c00"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["9746fc8415923e40c5961ad58708e7f6"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["6a38c25604c09abe30baff7e2176a673"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["90331dc9edd007e59c828faa3b8d73a9"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["eacdf87531ae2114049a9585ab73ef9d"]: Refreshing state... [id=always_use_https] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p hosts ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fhosts%252Fhosts) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p hosts ``` No changes. Your infrastructure matches the configuration. --- ### Plan Summary 17 projects, 0 with changes, 17 with no changes, 0 failed * :fast_forward: To **apply** all unapplied plans from this Pull Request, comment: ```shell atlantis apply ``` * :put_litter_in_its_place: To **delete** all plans and locks from this Pull Request, comment: ```shell atlantis unlock ```

anish commented 2026-10-05 17:53:40 +00:00

Owner

Copy link

replaced by new methodology described here #27

replaced by new methodology described here https://git.cmu.dev/ScottyLabs/infrastructure/issues/27

anish closed this pull request 2026-10-05 17:53:40 +00:00

anish deleted branch fix-renovate-openbao-auth 2026-10-05 17:53:44 +00:00

anish commented 2026-10-05 17:54:10 +00:00

Owner

Copy link

oops i just clicked the wrong pr sorry 😭

oops i just clicked the wrong pr sorry 😭

scottylabs-bot referenced this pull request 2026-10-13 05:32:53 +00:00

feat: manage the posthog proxy record and derive its CNAME target #159

anish commented 2026-10-13 05:36:48 +00:00

Owner

Copy link

atlantis unlock

atlantis unlock

scottylabs-bot commented 2026-10-13 05:36:57 +00:00

Owner

Copy link

All Atlantis locks for this PR have been unlocked and plans discarded

All Atlantis locks for this PR have been unlocked and plans discarded

All checks were successful

Hide checks

atlantis/plan: forgejo No changes. Your infrastructure matches the configuration.

Details

atlantis/plan: posthog No changes. Your infrastructure matches the configuration.

Details

atlantis/plan: snot No changes. Your infrastructure matches the configuration.

Details

atlantis/plan: governance No changes. Your infrastructure matches the configuration.

Details

atlantis/plan: matrix No changes. Your infrastructure matches the configuration.

Details

atlantis/plan: headscale No changes. Your infrastructure matches the configuration.

Details

atlantis/plan: ricochet No changes. Your infrastructure matches the configuration.

Details

atlantis/plan: atlantis No changes. Your infrastructure matches the configuration.

Details

CI / check-1 (pull_request) Successful in 1m14s

Details

CI / build (pull_request) Successful in 59s

Details

CI / check (pull_request) Successful in 0s

Details

atlantis/plan: litellm No changes. Your infrastructure matches the configuration.

Details

atlantis/plan: kennel No changes. Your infrastructure matches the configuration.

Details

atlantis/plan: observability No changes. Your infrastructure matches the configuration.

Details

atlantis/plan: garage-webadmin No changes. Your infrastructure matches the configuration.

Details

atlantis/plan: keycloak No changes. Your infrastructure matches the configuration.

Details

kennel/build build succeeded

Details

atlantis/plan: vaultwarden No changes. Your infrastructure matches the configuration.

Details

atlantis/plan: webhook No changes. Your infrastructure matches the configuration.

Details

kennel/deploy deployment healthy

atlantis/plan: openbao No changes. Your infrastructure matches the configuration.

Details

atlantis/plan: hosts No changes. Your infrastructure matches the configuration.

Details

atlantis/plan 17/17 projects planned successfully.

atlantis/apply 17/17 projects up to date.

atlantis/pre_workflow_hook: Generate atlantis.yaml from the flake succeeded.

Details

Pull request closed

This pull request cannot be reopened because the branch was deleted.

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

  

needs/docs

Must have documentation written

  

needs/research

Discuss the ideal implementation with the tech lead

  

needs/upstream

Needs a contribution to an upstream project

  

type/bug

Something not working as intended

  

type/external

Lives outside of code

  

type/feature

New functionality

  

type/refactor

Improving existing code

  

urgency

high

This is currently causing issues

  

urgency

immediate

This is making a project or feature unusable

  

urgency

low

This can happen whenever

  

urgency

medium

This is expected to cause issues soon

No labels

needs/docs

needs/research

needs/upstream

type/bug

type/external

type/feature

type/refactor

urgency

high

urgency

immediate

urgency

low

urgency

medium

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

3 participants

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

ScottyLabs/infrastructure!155

No description provided.