feat: manage the posthog proxy record and derive its CNAME target #159

Merged

anish merged 1 commit from posthog-proxy-record into main 2026-10-13 05:49:56 +00:00

Conversation 17 Commits 1 Files changed 1 +30 -8

anish commented 2026-10-13 05:32:42 +00:00

Owner

Copy link

No description provided.

anish added 1 commit 2026-10-13 05:32:42 +00:00

feat: manage the posthog proxy record and derive its CNAME target ... 7894c2fab1

Signed-off-by: Anish Pallati <i@anish.land>

scottylabs-bot commented 2026-10-13 05:32:53 +00:00

Owner

Copy link

Ran Plan for 17 projects:

1. project: litellm dir: . workspace: litellm
2. project: snot dir: . workspace: snot
3. project: kennel dir: . workspace: kennel
4. project: forgejo dir: . workspace: forgejo
5. project: headscale dir: . workspace: headscale
6. project: garage-webadmin dir: . workspace: garage-webadmin
7. project: posthog dir: . workspace: posthog
8. project: ricochet dir: . workspace: ricochet
9. project: hosts dir: . workspace: hosts
10. project: atlantis dir: . workspace: atlantis
11. project: governance dir: . workspace: governance
12. project: webhook dir: . workspace: webhook
13. project: openbao dir: . workspace: openbao
14. project: keycloak dir: . workspace: keycloak
15. project: matrix dir: . workspace: matrix
16. project: observability dir: . workspace: observability
17. project: vaultwarden dir: . workspace: vaultwarden

---

1. project: litellm dir: . workspace: litellm

Plan Failed: This project is currently locked by an unapplied plan from pull #155. To continue, delete the lock from #155 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

---

2. project: snot dir: . workspace: snot

Plan Failed: This project is currently locked by an unapplied plan from pull #155. To continue, delete the lock from #155 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

---

3. project: kennel dir: . workspace: kennel

Plan Failed: This project is currently locked by an unapplied plan from pull #155. To continue, delete the lock from #155 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

---

4. project: forgejo dir: . workspace: forgejo

Plan Failed: This project is currently locked by an unapplied plan from pull #155. To continue, delete the lock from #155 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

---

5. project: headscale dir: . workspace: headscale

Plan Failed: This project is currently locked by an unapplied plan from pull #155. To continue, delete the lock from #155 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

---

6. project: garage-webadmin dir: . workspace: garage-webadmin

Plan Failed: This project is currently locked by an unapplied plan from pull #155. To continue, delete the lock from #155 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

---

7. project: posthog dir: . workspace: posthog

Plan Failed: This project is currently locked by an unapplied plan from pull #155. To continue, delete the lock from #155 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

---

8. project: ricochet dir: . workspace: ricochet

Plan Failed: This project is currently locked by an unapplied plan from pull #155. To continue, delete the lock from #155 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

---

9. project: hosts dir: . workspace: hosts

Plan Failed: This project is currently locked by an unapplied plan from pull #155. To continue, delete the lock from #155 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

---

10. project: atlantis dir: . workspace: atlantis

Plan Failed: This project is currently locked by an unapplied plan from pull #155. To continue, delete the lock from #155 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

---

11. project: governance dir: . workspace: governance

Plan Failed: This project is currently locked by an unapplied plan from pull #155. To continue, delete the lock from #155 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

---

12. project: webhook dir: . workspace: webhook

Plan Failed: This project is currently locked by an unapplied plan from pull #155. To continue, delete the lock from #155 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

---

13. project: openbao dir: . workspace: openbao

Plan Failed: This project is currently locked by an unapplied plan from pull #155. To continue, delete the lock from #155 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

---

14. project: keycloak dir: . workspace: keycloak

Plan Failed: This project is currently locked by an unapplied plan from pull #155. To continue, delete the lock from #155 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

---

15. project: matrix dir: . workspace: matrix

Plan Failed: This project is currently locked by an unapplied plan from pull #155. To continue, delete the lock from #155 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

---

16. project: observability dir: . workspace: observability

Plan Failed: This project is currently locked by an unapplied plan from pull #155. To continue, delete the lock from #155 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

---

17. project: vaultwarden dir: . workspace: vaultwarden

Plan Failed: This project is currently locked by an unapplied plan from pull #155. To continue, delete the lock from #155 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

---

Plan Summary

17 projects, 0 with changes, 0 with no changes, 17 failed

• ⏩ To apply all unapplied plans from this Pull Request, comment:

  atlantis apply
  

• 🚮 To delete all plans and locks from this Pull Request, comment:

  atlantis unlock
  

Ran Plan for 17 projects: 1. project: `litellm` dir: `.` workspace: `litellm` 1. project: `snot` dir: `.` workspace: `snot` 1. project: `kennel` dir: `.` workspace: `kennel` 1. project: `forgejo` dir: `.` workspace: `forgejo` 1. project: `headscale` dir: `.` workspace: `headscale` 1. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin` 1. project: `posthog` dir: `.` workspace: `posthog` 1. project: `ricochet` dir: `.` workspace: `ricochet` 1. project: `hosts` dir: `.` workspace: `hosts` 1. project: `atlantis` dir: `.` workspace: `atlantis` 1. project: `governance` dir: `.` workspace: `governance` 1. project: `webhook` dir: `.` workspace: `webhook` 1. project: `openbao` dir: `.` workspace: `openbao` 1. project: `keycloak` dir: `.` workspace: `keycloak` 1. project: `matrix` dir: `.` workspace: `matrix` 1. project: `observability` dir: `.` workspace: `observability` 1. project: `vaultwarden` dir: `.` workspace: `vaultwarden` --- ### 1. project: `litellm` dir: `.` workspace: `litellm` **Plan Failed**: This project is currently locked by an unapplied plan from pull #155. To continue, delete the lock from #155 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 2. project: `snot` dir: `.` workspace: `snot` **Plan Failed**: This project is currently locked by an unapplied plan from pull #155. To continue, delete the lock from #155 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 3. project: `kennel` dir: `.` workspace: `kennel` **Plan Failed**: This project is currently locked by an unapplied plan from pull #155. To continue, delete the lock from #155 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 4. project: `forgejo` dir: `.` workspace: `forgejo` **Plan Failed**: This project is currently locked by an unapplied plan from pull #155. To continue, delete the lock from #155 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 5. project: `headscale` dir: `.` workspace: `headscale` **Plan Failed**: This project is currently locked by an unapplied plan from pull #155. To continue, delete the lock from #155 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 6. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin` **Plan Failed**: This project is currently locked by an unapplied plan from pull #155. To continue, delete the lock from #155 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 7. project: `posthog` dir: `.` workspace: `posthog` **Plan Failed**: This project is currently locked by an unapplied plan from pull #155. To continue, delete the lock from #155 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 8. project: `ricochet` dir: `.` workspace: `ricochet` **Plan Failed**: This project is currently locked by an unapplied plan from pull #155. To continue, delete the lock from #155 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 9. project: `hosts` dir: `.` workspace: `hosts` **Plan Failed**: This project is currently locked by an unapplied plan from pull #155. To continue, delete the lock from #155 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 10. project: `atlantis` dir: `.` workspace: `atlantis` **Plan Failed**: This project is currently locked by an unapplied plan from pull #155. To continue, delete the lock from #155 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 11. project: `governance` dir: `.` workspace: `governance` **Plan Failed**: This project is currently locked by an unapplied plan from pull #155. To continue, delete the lock from #155 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 12. project: `webhook` dir: `.` workspace: `webhook` **Plan Failed**: This project is currently locked by an unapplied plan from pull #155. To continue, delete the lock from #155 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 13. project: `openbao` dir: `.` workspace: `openbao` **Plan Failed**: This project is currently locked by an unapplied plan from pull #155. To continue, delete the lock from #155 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 14. project: `keycloak` dir: `.` workspace: `keycloak` **Plan Failed**: This project is currently locked by an unapplied plan from pull #155. To continue, delete the lock from #155 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 15. project: `matrix` dir: `.` workspace: `matrix` **Plan Failed**: This project is currently locked by an unapplied plan from pull #155. To continue, delete the lock from #155 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 16. project: `observability` dir: `.` workspace: `observability` **Plan Failed**: This project is currently locked by an unapplied plan from pull #155. To continue, delete the lock from #155 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 17. project: `vaultwarden` dir: `.` workspace: `vaultwarden` **Plan Failed**: This project is currently locked by an unapplied plan from pull #155. To continue, delete the lock from #155 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### Plan Summary 17 projects, 0 with changes, 0 with no changes, 17 failed * :fast_forward: To **apply** all unapplied plans from this Pull Request, comment: ```shell atlantis apply ``` * :put_litter_in_its_place: To **delete** all plans and locks from this Pull Request, comment: ```shell atlantis unlock ```

scottylabs-bot commented 2026-10-13 05:33:10 +00:00

Owner

Copy link

Kennel Deployments

Torn down at 2026-10-13 05:49:57 UTC.

<!-- kennel-deployment --> ### Kennel Deployments Torn down at 2026-10-13 05:49:57 UTC.

anish commented 2026-10-13 05:37:00 +00:00

Author

Owner

Copy link

atlantis import -p posthog posthog_proxy_record.v 019303f4-c39e-0000-25b3-e4957563fd6b/019cbbe2-8cae-0000-72a0-b7884cc7ec9e

atlantis import -p posthog posthog_proxy_record.v 019303f4-c39e-0000-25b3-e4957563fd6b/019cbbe2-8cae-0000-72a0-b7884cc7ec9e

scottylabs-bot commented 2026-10-13 05:37:07 +00:00

Owner

Copy link

Ran Import for project: posthog dir: . workspace: posthog

Show Output

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
this derivation will be built:
  /nix/store/5kcdlwglzssr469xs943c7n85vzxan4j-config.tf.json.drv
this path will be fetched (4.1 KiB download, 14.9 KiB unpacked):
  /nix/store/96c4ibp3dbbw2sgnam50ikjdcyg8l3xr-jq-1.8.2-dev
copying path '/nix/store/96c4ibp3dbbw2sgnam50ikjdcyg8l3xr-jq-1.8.2-dev' from 'http://localhost:5000'...
building '/nix/store/5kcdlwglzssr469xs943c7n85vzxan4j-config.tf.json.drv'...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding posthog/posthog versions matching "~> 1.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing cloudflare/cloudflare v5.27.0 to the shared cache directory...
- Installing posthog/posthog v1.0.24 to the shared cache directory...
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed posthog/posthog v1.0.24 (unauthenticated)
- Using posthog/posthog v1.0.24 from the shared cache directory
- Installed cloudflare/cloudflare v5.27.0 (signed, key ID C76001609EE3B136)
- Using cloudflare/cloudflare v5.27.0 from the shared cache directory

Providers are signed by their developers.
If you'd like to know more about provider signing, you can read about it here:
https://opentofu.org/docs/cli/plugins/signing/

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /tmp/forgejo-provider
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - posthog/posthog
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

data.cloudflare_zones.all: Reading...
posthog_proxy_record.v: Importing from ID "019303f4-c39e-0000-25b3-e4957563fd6b/019cbbe2-8cae-0000-72a0-b7884cc7ec9e"...
posthog_proxy_record.v: Import prepared!
  Prepared posthog_proxy_record for import
posthog_proxy_record.v: Refreshing state... [id=019cbbe2-8cae-0000-72a0-b7884cc7ec9e]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Read complete after 1s

Import successful!

The resources that were imported are shown above. These resources are now in
your OpenTofu state and will henceforth be managed by OpenTofu.

🚮 A plan file was discarded. Re-plan would be required before applying.

• 🔁 To plan this project again, comment:

  atlantis plan -p posthog
  

Ran Import for project: `posthog` dir: `.` workspace: `posthog` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it this derivation will be built: /nix/store/5kcdlwglzssr469xs943c7n85vzxan4j-config.tf.json.drv this path will be fetched (4.1 KiB download, 14.9 KiB unpacked): /nix/store/96c4ibp3dbbw2sgnam50ikjdcyg8l3xr-jq-1.8.2-dev copying path '/nix/store/96c4ibp3dbbw2sgnam50ikjdcyg8l3xr-jq-1.8.2-dev' from 'http://localhost:5000'... building '/nix/store/5kcdlwglzssr469xs943c7n85vzxan4j-config.tf.json.drv'... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding posthog/posthog versions matching "~> 1.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing cloudflare/cloudflare v5.27.0 to the shared cache directory... - Installing posthog/posthog v1.0.24 to the shared cache directory... - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed posthog/posthog v1.0.24 (unauthenticated) - Using posthog/posthog v1.0.24 from the shared cache directory - Installed cloudflare/cloudflare v5.27.0 (signed, key ID C76001609EE3B136) - Using cloudflare/cloudflare v5.27.0 from the shared cache directory Providers are signed by their developers. If you'd like to know more about provider signing, you can read about it here: https://opentofu.org/docs/cli/plugins/signing/ OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /tmp/forgejo-provider │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - posthog/posthog │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. data.cloudflare_zones.all: Reading... posthog_proxy_record.v: Importing from ID "019303f4-c39e-0000-25b3-e4957563fd6b/019cbbe2-8cae-0000-72a0-b7884cc7ec9e"... posthog_proxy_record.v: Import prepared! Prepared posthog_proxy_record for import posthog_proxy_record.v: Refreshing state... [id=019cbbe2-8cae-0000-72a0-b7884cc7ec9e] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Read complete after 1s Import successful! The resources that were imported are shown above. These resources are now in your OpenTofu state and will henceforth be managed by OpenTofu. ``` </details> :put_litter_in_its_place: A plan file was discarded. Re-plan would be required before applying. * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p posthog ```

anish commented 2026-10-13 05:37:15 +00:00

Author

Owner

Copy link

atlantis plan

atlantis plan

scottylabs-bot commented 2026-10-13 05:38:16 +00:00

Owner

Copy link

Ran Plan for 17 projects:

1. project: posthog dir: . workspace: posthog
2. project: snot dir: . workspace: snot
3. project: forgejo dir: . workspace: forgejo
4. project: governance dir: . workspace: governance
5. project: ricochet dir: . workspace: ricochet
6. project: litellm dir: . workspace: litellm
7. project: matrix dir: . workspace: matrix
8. project: webhook dir: . workspace: webhook
9. project: kennel dir: . workspace: kennel
10. project: observability dir: . workspace: observability
11. project: garage-webadmin dir: . workspace: garage-webadmin
12. project: keycloak dir: . workspace: keycloak
13. project: vaultwarden dir: . workspace: vaultwarden
14. project: headscale dir: . workspace: headscale
15. project: hosts dir: . workspace: hosts
16. project: atlantis dir: . workspace: atlantis
17. project: openbao dir: . workspace: openbao

---

1. project: posthog dir: . workspace: posthog

Show Output

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of posthog/posthog from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed posthog/posthog v1.0.24
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.27.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
posthog_proxy_record.v: Refreshing state... [id=019cbbe2-8cae-0000-72a0-b7884cc7ec9e]
data.keycloak_realm.scottylabs: Reading...
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["v"]: Refreshing state... [id=a34d75a85d3128693767b2db9b7f233e]

OpenTofu used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place (current -> planned)

OpenTofu will perform the following actions:

  # cloudflare_dns_record.this["v"] will be updated in-place
!   resource "cloudflare_dns_record" "this" {
        id                      = "a34d75a85d3128693767b2db9b7f233e"
+       include_shadow_metadata = false
        name                    = "v.scottylabs.org"
        tags                    = []
        # (12 unchanged attributes hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

─────────────────────────────────────────────────────────────────────────────

Saved the plan to:
/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/posthog/posthog-posthog.tfplan

To perform exactly these actions, run the following command to apply:
    tofu apply "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/posthog/posthog-posthog.tfplan"

• ▶️ To apply this plan, comment:

  atlantis apply -p posthog
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p posthog
  

Plan: 0 to add, 1 to change, 0 to destroy.

---

2. project: snot dir: . workspace: snot

Show Output

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/0cb729ebf55dd091fac47575a867afa3c2b642db1d8bb945df61e748eabb1f63.sqlite' is busy
this derivation will be built:
  /nix/store/84wji4lms5vrqg3j880pz78n5pbpwy8d-config.tf.json.drv
building '/nix/store/84wji4lms5vrqg3j880pz78n5pbpwy8d-config.tf.json.drv'...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing cloudflare/cloudflare v5.27.0 to the shared cache directory...
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.27.0 (unauthenticated)
- Using cloudflare/cloudflare v5.27.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.keycloak_realm.scottylabs: Reading...
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Read complete after 0s
cloudflare_dns_record.this["knot"]: Refreshing state... [id=264276915648465296ad9d24fb70a29b]

OpenTofu used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place (current -> planned)

OpenTofu will perform the following actions:

  # cloudflare_dns_record.this["knot"] will be updated in-place
!   resource "cloudflare_dns_record" "this" {
        id                      = "264276915648465296ad9d24fb70a29b"
+       include_shadow_metadata = false
        name                    = "knot.cmu.dev"
        tags                    = []
        # (12 unchanged attributes hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

─────────────────────────────────────────────────────────────────────────────

Saved the plan to:
/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/snot/snot-snot.tfplan

To perform exactly these actions, run the following command to apply:
    tofu apply "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/snot/snot-snot.tfplan"

• ▶️ To apply this plan, comment:

  atlantis apply -p snot
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p snot
  

Plan: 0 to add, 1 to change, 0 to destroy.

---

3. project: forgejo dir: . workspace: forgejo

Show Output

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/0cb729ebf55dd091fac47575a867afa3c2b642db1d8bb945df61e748eabb1f63.sqlite' is busy
this derivation will be built:
  /nix/store/24varw0gqxpazwfbr6s9dmxs9vyirs3p-config.tf.json.drv
building '/nix/store/24varw0gqxpazwfbr6s9dmxs9vyirs3p-config.tf.json.drv'...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Installing cloudflare/cloudflare v5.27.0 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.27.0 (unauthenticated)
- Using cloudflare/cloudflare v5.27.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
garage_bucket.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960]
garage_key.forgejo: Refreshing state... [id=GKea9810d648000e3e3b8df725]
garage_bucket_permission.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960/GKea9810d648000e3e3b8df725]
vault_kv_secret_v2.forgejo_storage: Refreshing state... [id=secret/data/infra/forgejo-storage]
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.forgejo: Refreshing state... [id=110b9b02-18e1-4bac-b5ce-936bbfbc83d6]
keycloak_openid_group_membership_protocol_mapper.forgejo_groups: Refreshing state... [id=72c7154f-372d-4a39-97c0-6516a88d6198]
vault_kv_secret_v2.forgejo_oidc: Refreshing state... [id=secret/data/infra/forgejo-oidc]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["git"]: Refreshing state... [id=f0fa6f4acf6bf381474c1a9304225f68]

OpenTofu used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place (current -> planned)

OpenTofu will perform the following actions:

  # cloudflare_dns_record.this["git"] will be updated in-place
!   resource "cloudflare_dns_record" "this" {
        id                      = "f0fa6f4acf6bf381474c1a9304225f68"
+       include_shadow_metadata = false
        name                    = "git.cmu.dev"
        tags                    = []
        # (12 unchanged attributes hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

─────────────────────────────────────────────────────────────────────────────

Saved the plan to:
/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/forgejo/forgejo-forgejo.tfplan

To perform exactly these actions, run the following command to apply:
    tofu apply "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/forgejo/forgejo-forgejo.tfplan"

• ▶️ To apply this plan, comment:

  atlantis apply -p forgejo
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p forgejo
  

Plan: 0 to add, 1 to change, 0 to destroy.

---

4. project: governance dir: . workspace: governance

Show Output

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/0cb729ebf55dd091fac47575a867afa3c2b642db1d8bb945df61e748eabb1f63.sqlite' is busy
this derivation will be built:
  /nix/store/l6zlv2f2w72md5b5qzczvp0vvg0h30k0-config.tf.json.drv
building '/nix/store/l6zlv2f2w72md5b5qzczvp0vvg0h30k0-config.tf.json.drv'...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing cloudflare/cloudflare v5.27.0 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.27.0 (unauthenticated)
- Using cloudflare/cloudflare v5.27.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
vault_kv_secret_v2.governance_ci_bot_token: Refreshing state... [id=secret/data/secretspec/governance/ci/BOT_TOKEN]
vault_policy.governance: Refreshing state... [id=governance]
vault_approle_auth_backend_role.governance: Refreshing state... [id=auth/approle/role/governance]
data.keycloak_realm.scottylabs: Reading...
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.governance_cli: Refreshing state... [id=f19d0308-19a8-4fc4-aa5f-f909fc38c5fe]
data.keycloak_openid_client.realm_management: Reading...
data.keycloak_openid_client.realm_management: Read complete after 0s [id=a0a15f13-b554-4bed-9fb2-3e63e0301278]
keycloak_openid_client_service_account_role.governance_cli_realm_management["query-clients"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/16d40468-7ba1-4f17-ba0d-0741880f291a]
keycloak_openid_client_service_account_role.governance_cli_realm_management["manage-clients"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/366f6242-2ce3-4be8-b861-3561e3c4b865]
keycloak_openid_client_service_account_role.governance_cli_realm_management["manage-users"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/eb96eb71-82eb-4317-b8f5-326472e11484]
keycloak_openid_client_service_account_role.governance_cli_realm_management["view-users"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/65f4c673-fc55-430c-b4b6-fd14ed151966]
vault_kv_secret_v2.governance_ci_keycloak_client_secret: Refreshing state... [id=secret/data/secretspec/governance/ci/KEYCLOAK_CLIENT_SECRET]
vault_kv_secret_v2.governance_ci_keycloak_client_id: Refreshing state... [id=secret/data/secretspec/governance/ci/KEYCLOAK_CLIENT_ID]
data.cloudflare_zones.all: Read complete after 1s

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p governance
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p governance
  

No changes. Your infrastructure matches the configuration.

---

5. project: ricochet dir: . workspace: ricochet

Plan Error

Show Output

running 'sh -c' 'nix build ".#$PROJECT_NAME.config" --out-link config.tf.json' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/ricochet': exit status 1: running "nix build \".#$PROJECT_NAME.config\" --out-link config.tf.json" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/ricochet": 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/0cb729ebf55dd091fac47575a867afa3c2b642db1d8bb945df61e748eabb1f63.sqlite' is busy
copying path '/nix/store/900imzbxbcbp9ajbw96k9q6a65v7wi99-source' from 'http://localhost:5000'...
remote: Enumerating objects: 130, done.        
remote: Counting objects:   0% (1/130)        
remote: Counting objects:   1% (2/130)        
remote: Counting objects:   2% (3/130)        
remote: Counting objects:   3% (4/130)        
remote: Counting objects:   4% (6/130)        
remote: Counting objects:   5% (7/130)        
remote: Counting objects:   6% (8/130)        
remote: Counting objects:   7% (10/130)        
remote: Counting objects:   8% (11/130)        
remote: Counting objects:   9% (12/130)        
remote: Counting objects:  10% (13/130)        
remote: Counting objects:  11% (15/130)        
remote: Counting objects:  12% (16/130)        
remote: Counting objects:  13% (17/130)        
remote: Counting objects:  14% (19/130)        
remote: Counting objects:  15% (20/130)        
remote: Counting objects:  16% (21/130)        
remote: Counting objects:  17% (23/130)        
remote: Counting objects:  18% (24/130)        
remote: Counting objects:  19% (25/130)        
remote: Counting objects:  20% (26/130)        
remote: Counting objects:  21% (28/130)        
remote: Counting objects:  22% (29/130)        
remote: Counting objects:  23% (30/130)        
remote: Counting objects:  24% (32/130)        
remote: Counting objects:  25% (33/130)        
remote: Counting objects:  26% (34/130)        
remote: Counting objects:  27% (36/130)        
remote: Counting objects:  28% (37/130)        
remote: Counting objects:  29% (38/130)        
remote: Counting objects:  30% (39/130)        
remote: Counting objects:  31% (41/130)        
remote: Counting objects:  32% (42/130)        
remote: Counting objects:  33% (43/130)        
remote: Counting objects:  34% (45/130)        
remote: Counting objects:  35% (46/130)        
remote: Counting objects:  36% (47/130)        
remote: Counting objects:  37% (49/130)        
remote: Counting objects:  38% (50/130)        
remote: Counting objects:  39% (51/130)        
remote: Counting objects:  40% (52/130)        
remote: Counting objects:  41% (54/130)        
remote: Counting objects:  42% (55/130)        
remote: Counting objects:  43% (56/130)        
remote: Counting objects:  44% (58/130)        
remote: Counting objects:  45% (59/130)        
remote: Counting objects:  46% (60/130)        
remote: Counting objects:  47% (62/130)        
remote: Counting objects:  48% (63/130)        
remote: Counting objects:  49% (64/130)        
remote: Counting objects:  50% (65/130)        
remote: Counting objects:  51% (67/130)        
remote: Counting objects:  52% (68/130)        
remote: Counting objects:  53% (69/130)        
remote: Counting objects:  54% (71/130)        
remote: Counting objects:  55% (72/130)        
remote: Counting objects:  56% (73/130)        
remote: Counting objects:  57% (75/130)        
remote: Counting objects:  58% (76/130)        
remote: Counting objects:  59% (77/130)        
remote: Counting objects:  60% (78/130)        
remote: Counting objects:  61% (80/130)        
remote: Counting objects:  62% (81/130)        
remote: Counting objects:  63% (82/130)        
remote: Counting objects:  64% (84/130)        
remote: Counting objects:  65% (85/130)        
remote: Counting objects:  66% (86/130)        
remote: Counting objects:  67% (88/130)        
remote: Counting objects:  68% (89/130)        
remote: Counting objects:  69% (90/130)        
remote: Counting objects:  70% (91/130)        
remote: Counting objects:  71% (93/130)        
remote: Counting objects:  72% (94/130)        
remote: Counting objects:  73% (95/130)        
remote: Counting objects:  74% (97/130)        
remote: Counting objects:  75% (98/130)        
remote: Counting objects:  76% (99/130)        
remote: Counting objects:  77% (101/130)        
remote: Counting objects:  78% (102/130)        
remote: Counting objects:  79% (103/130)        
remote: Counting objects:  80% (104/130)        
remote: Counting objects:  81% (106/130)        
remote: Counting objects:  82% (107/130)        
remote: Counting objects:  83% (108/130)        
remote: Counting objects:  84% (110/130)        
remote: Counting objects:  85% (111/130)        
remote: Counting objects:  86% (112/130)        
remote: Counting objects:  87% (114/130)        
remote: Counting objects:  88% (115/130)        
remote: Counting objects:  89% (116/130)        
remote: Counting objects:  90% (117/130)        
remote: Counting objects:  91% (119/130)        
remote: Counting objects:  92% (120/130)        
remote: Counting objects:  93% (121/130)        
remote: Counting objects:  94% (123/130)        
remote: Counting objects:  95% (124/130)        
remote: Counting objects:  96% (125/130)        
remote: Counting objects:  97% (127/130)        
remote: Counting objects:  98% (128/130)        
remote: Counting objects:  99% (129/130)        
remote: Counting objects: 100% (130/130)        
remote: Counting objects: 100% (130/130), done.        
remote: Compressing objects:   0% (1/126)        
remote: Compressing objects:   1% (2/126)        
remote: Compressing objects:   2% (3/126)        
remote: Compressing objects:   3% (4/126)        
remote: Compressing objects:   4% (6/126)        
remote: Compressing objects:   5% (7/126)        
remote: Compressing objects:   6% (8/126)        
remote: Compressing objects:   7% (9/126)        
remote: Compressing objects:   8% (11/126)        
remote: Compressing objects:   9% (12/126)        
remote: Compressing objects:  10% (13/126)        
remote: Compressing objects:  11% (14/126)        
remote: Compressing objects:  12% (16/126)        
remote: Compressing objects:  13% (17/126)        
remote: Compressing objects:  14% (18/126)        
remote: Compressing objects:  15% (19/126)        
remote: Compressing objects:  16% (21/126)        
remote: Compressing objects:  17% (22/126)        
remote: Compressing objects:  18% (23/126)        
remote: Compressing objects:  19% (24/126)        
remote: Compressing objects:  20% (26/126)        
remote: Compressing objects:  21% (27/126)        
remote: Compressing objects:  22% (28/126)        
remote: Compressing objects:  23% (29/126)        
remote: Compressing objects:  24% (31/126)        
remote: Compressing objects:  25% (32/126)        
remote: Compressing objects:  26% (33/126)        
remote: Compressing objects:  27% (35/126)        
remote: Compressing objects:  28% (36/126)        
remote: Compressing objects:  29% (37/126)        
remote: Compressing objects:  30% (38/126)        
remote: Compressing objects:  31% (40/126)        
remote: Compressing objects:  32% (41/126)        
remote: Compressing objects:  33% (42/126)        
remote: Compressing objects:  34% (43/126)        
remote: Compressing objects:  35% (45/126)        
remote: Compressing objects:  36% (46/126)        
remote: Compressing objects:  37% (47/126)        
remote: Compressing objects:  38% (48/126)        
remote: Compressing objects:  39% (50/126)        
remote: Compressing objects:  40% (51/126)        
remote: Compressing objects:  41% (52/126)        
remote: Compressing objects:  42% (53/126)        
remote: Compressing objects:  43% (55/126)        
remote: Compressing objects:  44% (56/126)        
remote: Compressing objects:  45% (57/126)        
remote: Compressing objects:  46% (58/126)        
remote: Compressing objects:  47% (60/126)        
remote: Compressing objects:  48% (61/126)        
remote: Compressing objects:  49% (62/126)        
remote: Compressing objects:  50% (63/126)        
remote: Compressing objects:  51% (65/126)        
remote: Compressing objects:  52% (66/126)        
remote: Compressing objects:  53% (67/126)        
remote: Compressing objects:  54% (69/126)        
remote: Compressing objects:  55% (70/126)        
remote: Compressing objects:  56% (71/126)        
remote: Compressing objects:  57% (72/126)        
remote: Compressing objects:  58% (74/126)        
remote: Compressing objects:  59% (75/126)        
remote: Compressing objects:  60% (76/126)        
remote: Compressing objects:  61% (77/126)        
remote: Compressing objects:  62% (79/126)        
remote: Compressing objects:  63% (80/126)        
remote: Compressing objects:  64% (81/126)        
remote: Compressing objects:  65% (82/126)        
remote: Compressing objects:  66% (84/126)        
remote: Compressing objects:  67% (85/126)        
remote: Compressing objects:  68% (86/126)        
remote: Compressing objects:  69% (87/126)        
remote: Compressing objects:  70% (89/126)        
remote: Compressing objects:  71% (90/126)        
remote: Compressing objects:  72% (91/126)        
remote: Compressing objects:  73% (92/126)        
remote: Compressing objects:  74% (94/126)        
remote: Compressing objects:  75% (95/126)        
remote: Compressing objects:  76% (96/126)        
remote: Compressing objects:  77% (98/126)        
remote: Compressing objects:  78% (99/126)        
remote: Compressing objects:  79% (100/126)        
remote: Compressing objects:  80% (101/126)        
remote: Compressing objects:  81% (103/126)        
remote: Compressing objects:  82% (104/126)        
remote: Compressing objects:  83% (105/126)        
remote: Compressing objects:  84% (106/126)        
remote: Compressing objects:  85% (108/126)        
remote: Compressing objects:  86% (109/126)        
remote: Compressing objects:  87% (110/126)        
remote: Compressing objects:  88% (111/126)        
remote: Compressing objects:  89% (113/126)        
remote: Compressing objects:  90% (114/126)        
remote: Compressing objects:  91% (115/126)        
remote: Compressing objects:  92% (116/126)        
remote: Compressing objects:  93% (118/126)        
remote: Compressing objects:  94% (119/126)        
remote: Compressing objects:  95% (120/126)        
remote: Compressing objects:  96% (121/126)        
remote: Compressing objects:  97% (123/126)        
remote: Compressing objects:  98% (124/126)        
remote: Compressing objects:  99% (125/126)        
remote: Compressing objects: 100% (126/126)        
remote: Compressing objects: 100% (126/126), done.        
Receiving objects:   0% (1/130)
Receiving objects:   1% (2/130)
Receiving objects:   2% (3/130)
Receiving objects:   3% (4/130)
Receiving objects:   4% (6/130)
Receiving objects:   5% (7/130)
Receiving objects:   6% (8/130)
Receiving objects:   7% (10/130)
Receiving objects:   8% (11/130)
Receiving objects:   9% (12/130)
Receiving objects:  10% (13/130)
Receiving objects:  11% (15/130)
Receiving objects:  12% (16/130)
Receiving objects:  13% (17/130)
Receiving objects:  14% (19/130)
Receiving objects:  15% (20/130)
Receiving objects:  16% (21/130)
Receiving objects:  17% (23/130)
Receiving objects:  18% (24/130)
Receiving objects:  19% (25/130)
Receiving objects:  20% (26/130)
Receiving objects:  21% (28/130)
Receiving objects:  22% (29/130)
Receiving objects:  23% (30/130)
Receiving objects:  24% (32/130)
Receiving objects:  25% (33/130)
Receiving objects:  26% (34/130)
Receiving objects:  27% (36/130)
Receiving objects:  28% (37/130)
Receiving objects:  29% (38/130)
Receiving objects:  30% (39/130)
Receiving objects:  31% (41/130)
Receiving objects:  32% (42/130)
Receiving objects:  33% (43/130)
remote: Total 130 (delta 8), reused 22 (delta 0), pack-reused 0 (from 0)        
Receiving objects:  34% (45/130)
Receiving objects:  35% (46/130)
Receiving objects:  36% (47/130)
Receiving objects:  37% (49/130)
Receiving objects:  38% (50/130)
Receiving objects:  39% (51/130)
Receiving objects:  40% (52/130)
Receiving objects:  41% (54/130)
Receiving objects:  42% (55/130)
Receiving objects:  43% (56/130)
Receiving objects:  44% (58/130)
Receiving objects:  45% (59/130)
Receiving objects:  46% (60/130)
Receiving objects:  47% (62/130)
Receiving objects:  48% (63/130)
Receiving objects:  49% (64/130)
Receiving objects:  50% (65/130)
Receiving objects:  51% (67/130)
Receiving objects:  52% (68/130)
Receiving objects:  53% (69/130)
Receiving objects:  54% (71/130)
Receiving objects:  55% (72/130)
Receiving objects:  56% (73/130)
Receiving objects:  57% (75/130)
Receiving objects:  58% (76/130)
Receiving objects:  59% (77/130)
Receiving objects:  60% (78/130)
Receiving objects:  61% (80/130)
Receiving objects:  62% (81/130)
Receiving objects:  63% (82/130)
Receiving objects:  64% (84/130)
Receiving objects:  65% (85/130)
Receiving objects:  66% (86/130)
Receiving objects:  67% (88/130)
Receiving objects:  68% (89/130)
Receiving objects:  69% (90/130)
Receiving objects:  70% (91/130)
Receiving objects:  71% (93/130)
Receiving objects:  72% (94/130)
Receiving objects:  73% (95/130)
Receiving objects:  74% (97/130)
Receiving objects:  75% (98/130)
Receiving objects:  76% (99/130)
Receiving objects:  77% (101/130)
Receiving objects:  78% (102/130)
Receiving objects:  79% (103/130)
Receiving objects:  80% (104/130)
Receiving objects:  81% (106/130)
Receiving objects:  82% (107/130)
Receiving objects:  83% (108/130)
Receiving objects:  84% (110/130)
Receiving objects:  85% (111/130)
Receiving objects:  86% (112/130)
Receiving objects:  87% (114/130)
Receiving objects:  88% (115/130)
Receiving objects:  89% (116/130)
Receiving objects:  90% (117/130)
Receiving objects:  91% (119/130)
Receiving objects:  92% (120/130)
Receiving objects:  93% (121/130)
Receiving objects:  94% (123/130)
Receiving objects:  95% (124/130)
Receiving objects:  96% (125/130)
Receiving objects:  97% (127/130)
Receiving objects:  98% (128/130)
Receiving objects:  99% (129/130)
Receiving objects: 100% (130/130)
Receiving objects: 100% (130/130), 153.22 KiB | 13.93 MiB/s, done.
Resolving deltas:   0% (0/8)
Resolving deltas:  12% (1/8)
Resolving deltas:  25% (2/8)
Resolving deltas:  37% (3/8)
Resolving deltas:  50% (4/8)
Resolving deltas:  62% (5/8)
Resolving deltas:  75% (6/8)
Resolving deltas:  87% (7/8)
Resolving deltas: 100% (8/8)
Resolving deltas: 100% (8/8), done.
From https://git.cmu.dev/ScottyLabs/kennel
 * branch            a2c082d5ffc53e50a68216a8a380e5603908061d -> FETCH_HEAD
unpacking 'github:feel-co/ncro/f224e3e8852cebbe1f74a2d43537e5e5eece8368?narHash=sha256-MYNywU2QeJ22mb3nd18TVrJQAPfDaI1ZGYj/QVh8mhw%3D' into the Git cache...
copying path '/nix/store/hapmafc7idql333c350rhda0azc45ma4-source' from 'http://localhost:5000'...
unpacking 'github:ryantm/agenix/3daa710894355fa2fad8243380af373a2b4046ef?narHash=sha256-n7wew722m1OTBT9DOIMxNX/NF4zfsSUABAO5eW3wikE%3D' into the Git cache...
error:
       … while calling the 'derivationStrict' builtin
         at «nix-internal»/derivation-internal.nix:37:12:
           36|
           37|   strict = derivationStrict drvAttrs;
             |            ^
           38|

       … while evaluating derivation 'config.tf.json'
         whose name attribute is located at «github:NixOS/nixpkgs/7fd4004d0511991fff3a0524856a9be09e28c5f0?narHash=sha256-i5qk1kLiit98rRbh1AXmWBNT9QXC/y4l5Wk/u5EdpDQ%3D»/pkgs/stdenv/generic/make-derivation.nix:651:11

       … while evaluating attribute 'value' of derivation 'config.tf.json'
         at «github:NixOS/nixpkgs/7fd4004d0511991fff3a0524856a9be09e28c5f0?narHash=sha256-i5qk1kLiit98rRbh1AXmWBNT9QXC/y4l5Wk/u5EdpDQ%3D»/pkgs/pkgs-lib/formats/json/default.nix:19:23:
           18|               nativeBuildInputs = [ jq ];
           19|               inherit value;
             |                       ^
           20|               preferLocalBuild = true;

       … while evaluating definitions from `/nix/store/apf5c6g5l656w29aypcrcxkxhcb2pq38-source/modules/terranix/base.nix, via option flake.modules.terranix.base':

       (stack trace truncated; use '--show-trace' to show the full, detailed trace)

       error: getting Git object '3449661c3f5f219cbbc952e3d5d0534fdf736702': object not found - no match for id (3449661c3f5f219cbbc952e3d5d0534fdf736702) (libgit2 error code = 9)

---

6. project: litellm dir: . workspace: litellm

Plan Error

Show Output

running 'sh -c' 'nix build ".#$PROJECT_NAME.config" --out-link config.tf.json' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/litellm': exit status 1: running "nix build \".#$PROJECT_NAME.config\" --out-link config.tf.json" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/litellm": 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/0cb729ebf55dd091fac47575a867afa3c2b642db1d8bb945df61e748eabb1f63.sqlite' is busy
copying path '/nix/store/900imzbxbcbp9ajbw96k9q6a65v7wi99-source' from 'http://localhost:5000'...
unpacking 'github:feel-co/ncro/f224e3e8852cebbe1f74a2d43537e5e5eece8368?narHash=sha256-MYNywU2QeJ22mb3nd18TVrJQAPfDaI1ZGYj/QVh8mhw%3D' into the Git cache...
copying path '/nix/store/hapmafc7idql333c350rhda0azc45ma4-source' from 'http://localhost:5000'...
unpacking 'github:ryantm/agenix/3daa710894355fa2fad8243380af373a2b4046ef?narHash=sha256-n7wew722m1OTBT9DOIMxNX/NF4zfsSUABAO5eW3wikE%3D' into the Git cache...
error:
       … while calling the 'derivationStrict' builtin
         at «nix-internal»/derivation-internal.nix:37:12:
           36|
           37|   strict = derivationStrict drvAttrs;
             |            ^
           38|

       … while evaluating derivation 'config.tf.json'
         whose name attribute is located at «github:NixOS/nixpkgs/7fd4004d0511991fff3a0524856a9be09e28c5f0?narHash=sha256-i5qk1kLiit98rRbh1AXmWBNT9QXC/y4l5Wk/u5EdpDQ%3D»/pkgs/stdenv/generic/make-derivation.nix:651:11

       … while evaluating attribute 'value' of derivation 'config.tf.json'
         at «github:NixOS/nixpkgs/7fd4004d0511991fff3a0524856a9be09e28c5f0?narHash=sha256-i5qk1kLiit98rRbh1AXmWBNT9QXC/y4l5Wk/u5EdpDQ%3D»/pkgs/pkgs-lib/formats/json/default.nix:19:23:
           18|               nativeBuildInputs = [ jq ];
           19|               inherit value;
             |                       ^
           20|               preferLocalBuild = true;

       … while evaluating definitions from `/nix/store/apf5c6g5l656w29aypcrcxkxhcb2pq38-source/modules/terranix/base.nix, via option flake.modules.terranix.base':

       (stack trace truncated; use '--show-trace' to show the full, detailed trace)

       error: getting Git object '3449661c3f5f219cbbc952e3d5d0534fdf736702': object not found - no match for id (3449661c3f5f219cbbc952e3d5d0534fdf736702) (libgit2 error code = 9)

---

7. project: matrix dir: . workspace: matrix

Show Output

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/0cb729ebf55dd091fac47575a867afa3c2b642db1d8bb945df61e748eabb1f63.sqlite' is busy
unpacking 'github:feel-co/ncro/f224e3e8852cebbe1f74a2d43537e5e5eece8368?narHash=sha256-MYNywU2QeJ22mb3nd18TVrJQAPfDaI1ZGYj/QVh8mhw%3D' into the Git cache...
copying path '/nix/store/hapmafc7idql333c350rhda0azc45ma4-source' from 'http://localhost:5000'...
unpacking 'github:ryantm/agenix/3daa710894355fa2fad8243380af373a2b4046ef?narHash=sha256-n7wew722m1OTBT9DOIMxNX/NF4zfsSUABAO5eW3wikE%3D' into the Git cache...
copying path '/nix/store/adcpmshidndclaz4dxjsgklrx3gqhaxp-source' from 'http://localhost:5000'...
unpacking 'github:catppuccin/nix/2e605f61db52a45a7ff1db414df395ef566565a3?narHash=sha256-hmF0FVrUW6UKQ74qyGJSepMYadnIqzVe2h7TQtZdbmo%3D' into the Git cache...
this derivation will be built:
  /nix/store/c9cq2i07h9jqjr5wb430gm5nyv24bdw0-config.tf.json.drv
building '/nix/store/c9cq2i07h9jqjr5wb430gm5nyv24bdw0-config.tf.json.drv'...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing cloudflare/cloudflare v5.27.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.27.0 (unauthenticated)
- Using cloudflare/cloudflare v5.27.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["matrix"]: Refreshing state... [id=c37d2e1a4edf950b4af4544574c159a8]
cloudflare_dns_record.this["@"]: Refreshing state... [id=63ff3b423afd444f8bd31201db232ada]

OpenTofu used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place (current -> planned)

OpenTofu will perform the following actions:

  # cloudflare_dns_record.this["@"] will be updated in-place
!   resource "cloudflare_dns_record" "this" {
        id                      = "63ff3b423afd444f8bd31201db232ada"
+       include_shadow_metadata = false
        name                    = "doggylabs.org"
        tags                    = []
        # (12 unchanged attributes hidden)
    }

  # cloudflare_dns_record.this["matrix"] will be updated in-place
!   resource "cloudflare_dns_record" "this" {
        id                      = "c37d2e1a4edf950b4af4544574c159a8"
+       include_shadow_metadata = false
        name                    = "matrix.doggylabs.org"
        tags                    = []
        # (12 unchanged attributes hidden)
    }

Plan: 0 to add, 2 to change, 0 to destroy.

─────────────────────────────────────────────────────────────────────────────

Saved the plan to:
/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/matrix/matrix-matrix.tfplan

To perform exactly these actions, run the following command to apply:
    tofu apply "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/matrix/matrix-matrix.tfplan"

• ▶️ To apply this plan, comment:

  atlantis apply -p matrix
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p matrix
  

Plan: 0 to add, 2 to change, 0 to destroy.

---

8. project: webhook dir: . workspace: webhook

Show Output

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/0cb729ebf55dd091fac47575a867afa3c2b642db1d8bb945df61e748eabb1f63.sqlite' is busy
unpacking 'github:ryantm/agenix/3daa710894355fa2fad8243380af373a2b4046ef?narHash=sha256-n7wew722m1OTBT9DOIMxNX/NF4zfsSUABAO5eW3wikE%3D' into the Git cache...
copying path '/nix/store/adcpmshidndclaz4dxjsgklrx3gqhaxp-source' from 'http://localhost:5000'...
unpacking 'github:catppuccin/nix/2e605f61db52a45a7ff1db414df395ef566565a3?narHash=sha256-hmF0FVrUW6UKQ74qyGJSepMYadnIqzVe2h7TQtZdbmo%3D' into the Git cache...
this derivation will be built:
  /nix/store/69cbll0gq4913k4zs3k55rfw2wyd7dhf-config.tf.json.drv
building '/nix/store/69cbll0gq4913k4zs3k55rfw2wyd7dhf-config.tf.json.drv'...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Installing cloudflare/cloudflare v5.27.0 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.27.0 (unauthenticated)
- Using cloudflare/cloudflare v5.27.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["webhooks"]: Refreshing state... [id=0ec7b1a8c64ceb6e83ded9a5842a1198]

OpenTofu used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place (current -> planned)

OpenTofu will perform the following actions:

  # cloudflare_dns_record.this["webhooks"] will be updated in-place
!   resource "cloudflare_dns_record" "this" {
        id                      = "0ec7b1a8c64ceb6e83ded9a5842a1198"
+       include_shadow_metadata = false
        name                    = "webhooks.scottylabs.org"
        tags                    = []
        # (12 unchanged attributes hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

─────────────────────────────────────────────────────────────────────────────

Saved the plan to:
/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/webhook/webhook-webhook.tfplan

To perform exactly these actions, run the following command to apply:
    tofu apply "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/webhook/webhook-webhook.tfplan"

• ▶️ To apply this plan, comment:

  atlantis apply -p webhook
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p webhook
  

Plan: 0 to add, 1 to change, 0 to destroy.

---

9. project: kennel dir: . workspace: kennel

Show Output

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/0cb729ebf55dd091fac47575a867afa3c2b642db1d8bb945df61e748eabb1f63.sqlite' is busy
unpacking 'github:feel-co/ncro/f224e3e8852cebbe1f74a2d43537e5e5eece8368?narHash=sha256-MYNywU2QeJ22mb3nd18TVrJQAPfDaI1ZGYj/QVh8mhw%3D' into the Git cache...
copying path '/nix/store/hapmafc7idql333c350rhda0azc45ma4-source' from 'http://localhost:5000'...
unpacking 'github:catppuccin/nix/2e605f61db52a45a7ff1db414df395ef566565a3?narHash=sha256-hmF0FVrUW6UKQ74qyGJSepMYadnIqzVe2h7TQtZdbmo%3D' into the Git cache...
this derivation will be built:
  /nix/store/qc44qr6vicxnn30jdryvhkfg07xc3803-config.tf.json.drv
building '/nix/store/qc44qr6vicxnn30jdryvhkfg07xc3803-config.tf.json.drv'...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Installing cloudflare/cloudflare v5.27.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.27.0 (unauthenticated)
- Using cloudflare/cloudflare v5.27.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
vault_policy.kennel: Refreshing state... [id=kennel]
vault_approle_auth_backend_role.kennel: Refreshing state... [id=auth/approle/role/kennel]
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Read complete after 0s
cloudflare_dns_record.this["*"]: Refreshing state... [id=2d4b06ae1c39a5d196a27114e07c97e9]
cloudflare_dns_record.this["kennel"]: Refreshing state... [id=a34066db99519085f24a01cebcb25d69]
cloudflare_dns_record.this["s3.kennel"]: Refreshing state... [id=d3acfc0e5ca45e0704c40d9e3fa2e60f]

OpenTofu used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place (current -> planned)

OpenTofu will perform the following actions:

  # cloudflare_dns_record.this["*"] will be updated in-place
!   resource "cloudflare_dns_record" "this" {
        id                      = "2d4b06ae1c39a5d196a27114e07c97e9"
+       include_shadow_metadata = false
        name                    = "*.scottylabs.net"
        tags                    = []
        # (12 unchanged attributes hidden)
    }

  # cloudflare_dns_record.this["kennel"] will be updated in-place
!   resource "cloudflare_dns_record" "this" {
        id                      = "a34066db99519085f24a01cebcb25d69"
+       include_shadow_metadata = false
        name                    = "kennel.scottylabs.org"
        tags                    = []
        # (12 unchanged attributes hidden)
    }

  # cloudflare_dns_record.this["s3.kennel"] will be updated in-place
!   resource "cloudflare_dns_record" "this" {
        id                      = "d3acfc0e5ca45e0704c40d9e3fa2e60f"
+       include_shadow_metadata = false
        name                    = "s3.kennel.scottylabs.org"
        tags                    = []
        # (12 unchanged attributes hidden)
    }

Plan: 0 to add, 3 to change, 0 to destroy.

─────────────────────────────────────────────────────────────────────────────

Saved the plan to:
/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/kennel/kennel-kennel.tfplan

To perform exactly these actions, run the following command to apply:
    tofu apply "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/kennel/kennel-kennel.tfplan"

• ▶️ To apply this plan, comment:

  atlantis apply -p kennel
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p kennel
  

Plan: 0 to add, 3 to change, 0 to destroy.

---

10. project: observability dir: . workspace: observability

Show Output

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
copying path '/nix/store/900imzbxbcbp9ajbw96k9q6a65v7wi99-source' from 'http://localhost:5000'...
unpacking 'github:feel-co/ncro/f224e3e8852cebbe1f74a2d43537e5e5eece8368?narHash=sha256-MYNywU2QeJ22mb3nd18TVrJQAPfDaI1ZGYj/QVh8mhw%3D' into the Git cache...
copying path '/nix/store/hapmafc7idql333c350rhda0azc45ma4-source' from 'http://localhost:5000'...
unpacking 'github:ryantm/agenix/3daa710894355fa2fad8243380af373a2b4046ef?narHash=sha256-n7wew722m1OTBT9DOIMxNX/NF4zfsSUABAO5eW3wikE%3D' into the Git cache...
copying path '/nix/store/adcpmshidndclaz4dxjsgklrx3gqhaxp-source' from 'http://localhost:5000'...
unpacking 'github:catppuccin/nix/2e605f61db52a45a7ff1db414df395ef566565a3?narHash=sha256-hmF0FVrUW6UKQ74qyGJSepMYadnIqzVe2h7TQtZdbmo%3D' into the Git cache...
remote: Enumerating objects: 27, done.        
remote: Counting objects:   3% (1/27)        
remote: Counting objects:   7% (2/27)        
remote: Counting objects:  11% (3/27)        
remote: Counting objects:  14% (4/27)        
remote: Counting objects:  18% (5/27)        
remote: Counting objects:  22% (6/27)        
remote: Counting objects:  25% (7/27)        
remote: Counting objects:  29% (8/27)        
remote: Counting objects:  33% (9/27)        
remote: Counting objects:  37% (10/27)        
remote: Counting objects:  40% (11/27)        
remote: Counting objects:  44% (12/27)        
remote: Counting objects:  48% (13/27)        
remote: Counting objects:  51% (14/27)        
remote: Counting objects:  55% (15/27)        
remote: Counting objects:  59% (16/27)        
remote: Counting objects:  62% (17/27)        
remote: Counting objects:  66% (18/27)        
remote: Counting objects:  70% (19/27)        
remote: Counting objects:  74% (20/27)        
remote: Counting objects:  77% (21/27)        
remote: Counting objects:  81% (22/27)        
remote: Counting objects:  85% (23/27)        
remote: Counting objects:  88% (24/27)        
remote: Counting objects:  92% (25/27)        
remote: Counting objects:  96% (26/27)        
remote: Counting objects: 100% (27/27)        
remote: Counting objects: 100% (27/27), done.        
remote: Compressing objects:   3% (1/26)        
remote: Compressing objects:   7% (2/26)        
remote: Compressing objects:  11% (3/26)        
remote: Compressing objects:  15% (4/26)        
remote: Compressing objects:  19% (5/26)        
remote: Compressing objects:  23% (6/26)        
remote: Compressing objects:  26% (7/26)        
remote: Compressing objects:  30% (8/26)        
remote: Compressing objects:  34% (9/26)        
remote: Compressing objects:  38% (10/26)        
remote: Compressing objects:  42% (11/26)        
remote: Compressing objects:  46% (12/26)        
remote: Compressing objects:  50% (13/26)        
remote: Compressing objects:  53% (14/26)        
remote: Compressing objects:  57% (15/26)        
remote: Compressing objects:  61% (16/26)        
remote: Compressing objects:  65% (17/26)        
remote: Compressing objects:  69% (18/26)        
remote: Compressing objects:  73% (19/26)        
remote: Compressing objects:  76% (20/26)        
remote: Compressing objects:  80% (21/26)        
remote: Compressing objects:  84% (22/26)        
remote: Compressing objects:  88% (23/26)        
remote: Compressing objects:  92% (24/26)        
remote: Compressing objects:  96% (25/26)        
remote: Compressing objects: 100% (26/26)        
remote: Compressing objects: 100% (26/26), done.        
remote: Total 27 (delta 0), reused 21 (delta 0), pack-reused 0 (from 0)        
From https://codeberg.org/anish/llm-pkgs
 * branch            d0e04df172561bf383b799d2603f1a21bc4593e5 -> FETCH_HEAD
this derivation will be built:
  /nix/store/lfbx8493iaq1j9a9p08n6xrrqisqcnla-config.tf.json.drv
building '/nix/store/lfbx8493iaq1j9a9p08n6xrrqisqcnla-config.tf.json.drv'...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Installing cloudflare/cloudflare v5.27.0 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed cloudflare/cloudflare v5.27.0 (unauthenticated)
- Using cloudflare/cloudflare v5.27.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.grafana_secret_key: Refreshing state... [id=none]
vault_kv_secret_v2.grafana_secret_key: Refreshing state... [id=secret/data/infra/grafana-secret-key]
garage_key.loki: Refreshing state... [id=GKeed8ed294debe12a38bbd470]
garage_bucket.loki_chunks: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3]
garage_bucket.tempo_traces: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c]
garage_key.tempo: Refreshing state... [id=GK9769dcb3b38a1ae26ac62b3c]
garage_bucket_permission.loki: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3/GKeed8ed294debe12a38bbd470]
vault_kv_secret_v2.loki_s3: Refreshing state... [id=secret/data/infra/loki-s3]
vault_kv_secret_v2.tempo_s3: Refreshing state... [id=secret/data/infra/tempo-s3]
garage_bucket_permission.tempo: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c/GK9769dcb3b38a1ae26ac62b3c]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.grafana: Refreshing state... [id=527e25bc-77c3-43d5-ac28-32aa2f21fa9c]
data.cloudflare_zones.all: Reading...
vault_kv_secret_v2.grafana_oidc: Refreshing state... [id=secret/data/infra/grafana-oidc]
keycloak_openid_group_membership_protocol_mapper.grafana_groups: Refreshing state... [id=5c54e939-7a03-4857-93f5-437ca25e206e]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["grafana"]: Refreshing state... [id=9924f9e66892a5aeafe09ed0128a65a0]
cloudflare_dns_record.this["uptime"]: Refreshing state... [id=0909f2bd8ade5d54a53b58a2a3fef540]

OpenTofu used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place (current -> planned)

OpenTofu will perform the following actions:

  # cloudflare_dns_record.this["grafana"] will be updated in-place
!   resource "cloudflare_dns_record" "this" {
        id                      = "9924f9e66892a5aeafe09ed0128a65a0"
+       include_shadow_metadata = false
        name                    = "grafana.scottylabs.org"
        tags                    = []
        # (12 unchanged attributes hidden)
    }

  # cloudflare_dns_record.this["uptime"] will be updated in-place
!   resource "cloudflare_dns_record" "this" {
        id                      = "0909f2bd8ade5d54a53b58a2a3fef540"
+       include_shadow_metadata = false
        name                    = "uptime.scottylabs.org"
        tags                    = []
        # (12 unchanged attributes hidden)
    }

Plan: 0 to add, 2 to change, 0 to destroy.

─────────────────────────────────────────────────────────────────────────────

Saved the plan to:
/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/observability/observability-observability.tfplan

To perform exactly these actions, run the following command to apply:
    tofu apply "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/observability/observability-observability.tfplan"

• ▶️ To apply this plan, comment:

  atlantis apply -p observability
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p observability
  

Plan: 0 to add, 2 to change, 0 to destroy.

---

11. project: garage-webadmin dir: . workspace: garage-webadmin

Show Output

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/0cb729ebf55dd091fac47575a867afa3c2b642db1d8bb945df61e748eabb1f63.sqlite' is busy
unpacking 'github:feel-co/ncro/f224e3e8852cebbe1f74a2d43537e5e5eece8368?narHash=sha256-MYNywU2QeJ22mb3nd18TVrJQAPfDaI1ZGYj/QVh8mhw%3D' into the Git cache...
copying path '/nix/store/hapmafc7idql333c350rhda0azc45ma4-source' from 'http://localhost:5000'...
unpacking 'github:ryantm/agenix/3daa710894355fa2fad8243380af373a2b4046ef?narHash=sha256-n7wew722m1OTBT9DOIMxNX/NF4zfsSUABAO5eW3wikE%3D' into the Git cache...
copying path '/nix/store/adcpmshidndclaz4dxjsgklrx3gqhaxp-source' from 'http://localhost:5000'...
unpacking 'github:catppuccin/nix/2e605f61db52a45a7ff1db414df395ef566565a3?narHash=sha256-hmF0FVrUW6UKQ74qyGJSepMYadnIqzVe2h7TQtZdbmo%3D' into the Git cache...
this derivation will be built:
  /nix/store/806rhb94wxsh5nvg77b6gznrksld468z-config.tf.json.drv
building '/nix/store/806rhb94wxsh5nvg77b6gznrksld468z-config.tf.json.drv'...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing cloudflare/cloudflare v5.27.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.27.0 (unauthenticated)
- Using cloudflare/cloudflare v5.27.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.garage_webadmin_jwt: Refreshing state... [id=none]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.garage_webadmin: Refreshing state... [id=a48c9f66-cde3-463d-970c-b2d7de716185]
data.cloudflare_zones.all: Reading...
keycloak_openid_group_membership_protocol_mapper.garage_webadmin_groups: Refreshing state... [id=a86e928b-6c7a-4081-a291-637e752fbabf]
vault_kv_secret_v2.garage_webadmin_oidc: Refreshing state... [id=secret/data/infra/garage-webadmin-oidc]
vault_kv_secret_v2.garage_webadmin_jwt: Refreshing state... [id=secret/data/infra/garage-webadmin-jwt]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["garage"]: Refreshing state... [id=4054146ceff1515773704f89136b25f1]

OpenTofu used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place (current -> planned)

OpenTofu will perform the following actions:

  # cloudflare_dns_record.this["garage"] will be updated in-place
!   resource "cloudflare_dns_record" "this" {
        id                      = "4054146ceff1515773704f89136b25f1"
+       include_shadow_metadata = false
        name                    = "garage.scottylabs.org"
        tags                    = []
        # (12 unchanged attributes hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

─────────────────────────────────────────────────────────────────────────────

Saved the plan to:
/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/garage-webadmin/garage-webadmin-garage-webadmin.tfplan

To perform exactly these actions, run the following command to apply:
    tofu apply "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/garage-webadmin/garage-webadmin-garage-webadmin.tfplan"

• ▶️ To apply this plan, comment:

  atlantis apply -p garage-webadmin
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p garage-webadmin
  

Plan: 0 to add, 1 to change, 0 to destroy.

---

12. project: keycloak dir: . workspace: keycloak

Show Output

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/0cb729ebf55dd091fac47575a867afa3c2b642db1d8bb945df61e748eabb1f63.sqlite' is busy
copying path '/nix/store/900imzbxbcbp9ajbw96k9q6a65v7wi99-source' from 'http://localhost:5000'...
unpacking 'github:feel-co/ncro/f224e3e8852cebbe1f74a2d43537e5e5eece8368?narHash=sha256-MYNywU2QeJ22mb3nd18TVrJQAPfDaI1ZGYj/QVh8mhw%3D' into the Git cache...
copying path '/nix/store/hapmafc7idql333c350rhda0azc45ma4-source' from 'http://localhost:5000'...
unpacking 'github:ryantm/agenix/3daa710894355fa2fad8243380af373a2b4046ef?narHash=sha256-n7wew722m1OTBT9DOIMxNX/NF4zfsSUABAO5eW3wikE%3D' into the Git cache...
copying path '/nix/store/adcpmshidndclaz4dxjsgklrx3gqhaxp-source' from 'http://localhost:5000'...
unpacking 'github:catppuccin/nix/2e605f61db52a45a7ff1db414df395ef566565a3?narHash=sha256-hmF0FVrUW6UKQ74qyGJSepMYadnIqzVe2h7TQtZdbmo%3D' into the Git cache...
this derivation will be built:
  /nix/store/lsmks8vh0hvkfvhhx1qpd3qba8prd9hm-config.tf.json.drv
building '/nix/store/lsmks8vh0hvkfvhhx1qpd3qba8prd9hm-config.tf.json.drv'...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Installing cloudflare/cloudflare v5.27.0 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.27.0 (unauthenticated)
- Using cloudflare/cloudflare v5.27.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.vault_kv_secret_v2.forgejo_idp: Reading...
data.vault_kv_secret_v2.keycloak_idp: Reading...
data.vault_kv_secret_v2.keycloak_ldap: Reading...
data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp]
data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp]
data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_saml_identity_provider.cmu_saml: Refreshing state... [id=cmu-saml]
keycloak_oidc_identity_provider.cmu: Refreshing state... [id=cmu]
keycloak_ldap_user_federation.cmu: Refreshing state... [id=TtPPdhQJRUSFFwr_nJ2gcA]
keycloak_oidc_google_identity_provider.google: Refreshing state... [id=google]
keycloak_oidc_identity_provider.cmu_git: Refreshing state... [id=cmu-dev]
keycloak_oidc_identity_provider.slack: Refreshing state... [id=slack]
keycloak_realm_user_profile.scottylabs: Refreshing state... [id=scottylabs]
keycloak_custom_identity_provider_mapper.cmu_saml_username: Refreshing state... [id=32fed5ec-b30e-4b69-90a3-64c58f592ded]
keycloak_custom_identity_provider_mapper.cmu_username: Refreshing state... [id=65d1857d-19e5-4db5-940c-7751b770b4ac]
keycloak_custom_identity_provider_mapper.cmudev_email: Refreshing state... [id=2763e7d7-f102-479e-a560-41704bcf5e4b]
keycloak_custom_identity_provider_mapper.cmudev_id: Refreshing state... [id=5944bfd3-9704-482e-ac25-c41a40351cd7]
keycloak_custom_identity_provider_mapper.cmudev_username: Refreshing state... [id=8f04fb48-8434-43d6-accd-5b3a1e48e9b2]
keycloak_custom_identity_provider_mapper.cmudev_name: Refreshing state... [id=17703dd7-f88f-4d6b-88f0-e7561e796c8f]
keycloak_custom_identity_provider_mapper.google_email: Refreshing state... [id=ab2117f2-dcbf-4409-a7b7-c7354317e6cc]
keycloak_custom_identity_provider_mapper.google_id: Refreshing state... [id=eda09ecd-d9ce-4ab0-a585-8f7d45dff7de]
keycloak_custom_identity_provider_mapper.google_name: Refreshing state... [id=9d5c678f-df91-493d-a575-be1ce56a34e0]
keycloak_custom_identity_provider_mapper.slack_id: Refreshing state... [id=7d6f3768-e0a7-41c2-b252-95d2709c65b7]
data.cloudflare_zones.all: Read complete after 0s
keycloak_custom_identity_provider_mapper.slack_email: Refreshing state... [id=ea769c6c-b497-49ec-9a4d-8ba28005e62d]
keycloak_custom_identity_provider_mapper.slack_name: Refreshing state... [id=2e4d5410-12d5-46b3-b3d4-7f5b17ee0556]
keycloak_ldap_user_attribute_mapper.cmu_ldap_orcid: Refreshing state... [id=66b0d533-9f67-4b17-8bce-d056c3196377]
keycloak_ldap_user_attribute_mapper.cmu_ldap_class: Refreshing state... [id=2f7671ad-081b-497a-b868-e48ba2e1d651]
keycloak_ldap_user_attribute_mapper.cmu_ldap_full_email: Refreshing state... [id=267b1bc1-9714-46d5-85c0-e3b9a120b4da]
keycloak_ldap_user_attribute_mapper.cmu_ldap_full_name: Refreshing state... [id=3246c4a5-14c9-444d-ba7d-ab2fa110c38d]
keycloak_ldap_user_attribute_mapper.cmu_ldap_primary_affiliation: Refreshing state... [id=68cb7c40-51a4-4b5f-b520-617ae560163b]
keycloak_ldap_user_attribute_mapper.cmu_ldap_display_name: Refreshing state... [id=ffc86fab-f094-4d62-83a8-9aeffb3b6784]
keycloak_ldap_user_attribute_mapper.cmu_ldap_first_name: Refreshing state... [id=5545f837-8bb1-4435-8797-a780dfd3c290]
keycloak_ldap_user_attribute_mapper.cmu_ldap_status: Refreshing state... [id=c4907832-a07a-4c5c-9a36-852b13f90cf6]
keycloak_ldap_msad_user_account_control_mapper.cmu_ldap_msad: Refreshing state... [id=59e25378-3850-47d9-bfa3-18aec5d2bef3]
keycloak_ldap_user_attribute_mapper.cmu_ldap_email: Refreshing state... [id=409b11eb-37ae-4943-9983-7613b0bf392f]
keycloak_ldap_user_attribute_mapper.cmu_ldap_colleges: Refreshing state... [id=0ad2e74c-edb9-48c8-a7c7-3958d49ca802]
keycloak_ldap_user_attribute_mapper.cmu_ldap_modify_date: Refreshing state... [id=5618310c-00e4-4bec-9e04-3975357268ae]
keycloak_ldap_user_attribute_mapper.cmu_ldap_departments: Refreshing state... [id=da295d4b-3ee1-41b2-a9cb-4364c308c4fc]
keycloak_ldap_user_attribute_mapper.cmu_ldap_middle_name: Refreshing state... [id=73050ab4-9a3a-43cd-be03-6eaf2c891113]
keycloak_ldap_user_attribute_mapper.cmu_ldap_username: Refreshing state... [id=4277dde1-b06e-42ff-acf8-5537604cb505]
keycloak_ldap_user_attribute_mapper.cmu_ldap_last_name: Refreshing state... [id=1bdeb17a-f3b5-4d20-9405-f18950582ec9]
keycloak_ldap_user_attribute_mapper.cmu_ldap_affiliations: Refreshing state... [id=d5051889-ed12-4307-ae20-6cb808f988d1]
keycloak_ldap_user_attribute_mapper.cmu_ldap_creation_date: Refreshing state... [id=e271c3e5-024c-441d-8662-00aff6f95f60]
keycloak_ldap_custom_mapper.cmu_ldap_kerberos_principal: Refreshing state... [id=5f10a23b-84b2-4441-ac93-8042dd701e29]
keycloak_ldap_user_attribute_mapper.cmu_ldap_level: Refreshing state... [id=981dc6b9-9957-48d2-94f4-c9e8182af115]
cloudflare_dns_record.this["idp"]: Refreshing state... [id=76512b10636c34a8230d5618d365d6bc]

OpenTofu used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place (current -> planned)

OpenTofu will perform the following actions:

  # cloudflare_dns_record.this["idp"] will be updated in-place
!   resource "cloudflare_dns_record" "this" {
        id                      = "76512b10636c34a8230d5618d365d6bc"
+       include_shadow_metadata = false
        name                    = "idp.scottylabs.org"
        tags                    = []
        # (12 unchanged attributes hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.
╷
│ Warning: Deprecated Resource
│ 
│   with data.vault_kv_secret_v2.forgejo_idp,
│   on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp:
│   15:       },
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
│ 
│ (and 5 more similar warnings elsewhere)
╵
╷
│ Warning: Value derived from a deprecated source
│ 
│   with keycloak_ldap_user_federation.cmu,
│   on config.tf.json line 423, in resource.keycloak_ldap_user_federation.cmu:
│  423:         "vendor": "AD"
│ 
│ This value is derived from data.vault_kv_secret_v2.keycloak_ldap, which is
│ deprecated with the following message:
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
╵
╷
│ Warning: Value derived from a deprecated source
│ 
│   with keycloak_oidc_google_identity_provider.google,
│   on config.tf.json line 437, in resource.keycloak_oidc_google_identity_provider.google:
│  437:       }
│ 
│ This value is derived from data.vault_kv_secret_v2.keycloak_idp, which is
│ deprecated with the following message:
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
╵
╷
│ Warning: Value derived from a deprecated source
│ 
│   with keycloak_oidc_identity_provider.cmu_git,
│   on config.tf.json line 490, in resource.keycloak_oidc_identity_provider.cmu_git:
│  490:         "validate_signature": true
│ 
│ This value is derived from data.vault_kv_secret_v2.forgejo_idp, which is
│ deprecated with the following message:
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
╵

─────────────────────────────────────────────────────────────────────────────

Saved the plan to:
/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/keycloak/keycloak-keycloak.tfplan

To perform exactly these actions, run the following command to apply:
    tofu apply "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/keycloak/keycloak-keycloak.tfplan"

• ▶️ To apply this plan, comment:

  atlantis apply -p keycloak
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p keycloak
  

Plan: 0 to add, 1 to change, 0 to destroy.

---

13. project: vaultwarden dir: . workspace: vaultwarden

Show Output

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/0cb729ebf55dd091fac47575a867afa3c2b642db1d8bb945df61e748eabb1f63.sqlite' is busy
copying path '/nix/store/hapmafc7idql333c350rhda0azc45ma4-source' from 'http://localhost:5000'...
unpacking 'github:ryantm/agenix/3daa710894355fa2fad8243380af373a2b4046ef?narHash=sha256-n7wew722m1OTBT9DOIMxNX/NF4zfsSUABAO5eW3wikE%3D' into the Git cache...
copying path '/nix/store/adcpmshidndclaz4dxjsgklrx3gqhaxp-source' from 'http://localhost:5000'...
unpacking 'github:catppuccin/nix/2e605f61db52a45a7ff1db414df395ef566565a3?narHash=sha256-hmF0FVrUW6UKQ74qyGJSepMYadnIqzVe2h7TQtZdbmo%3D' into the Git cache...
this derivation will be built:
  /nix/store/mgh15yw442kji4d9hbb1bg9mppfym685-config.tf.json.drv
building '/nix/store/mgh15yw442kji4d9hbb1bg9mppfym685-config.tf.json.drv'...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing cloudflare/cloudflare v5.27.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.27.0 (unauthenticated)
- Using cloudflare/cloudflare v5.27.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Reading...
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["vault"]: Refreshing state... [id=7828e0eeb9e7f251c797f565828a47f6]

OpenTofu used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place (current -> planned)

OpenTofu will perform the following actions:

  # cloudflare_dns_record.this["vault"] will be updated in-place
!   resource "cloudflare_dns_record" "this" {
        id                      = "7828e0eeb9e7f251c797f565828a47f6"
+       include_shadow_metadata = false
        name                    = "vault.scottylabs.org"
        tags                    = []
        # (12 unchanged attributes hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

─────────────────────────────────────────────────────────────────────────────

Saved the plan to:
/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/vaultwarden/vaultwarden-vaultwarden.tfplan

To perform exactly these actions, run the following command to apply:
    tofu apply "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/vaultwarden/vaultwarden-vaultwarden.tfplan"

• ▶️ To apply this plan, comment:

  atlantis apply -p vaultwarden
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p vaultwarden
  

Plan: 0 to add, 1 to change, 0 to destroy.

---

14. project: headscale dir: . workspace: headscale

Show Output

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/0cb729ebf55dd091fac47575a867afa3c2b642db1d8bb945df61e748eabb1f63.sqlite' is busy
copying path '/nix/store/900imzbxbcbp9ajbw96k9q6a65v7wi99-source' from 'http://localhost:5000'...
unpacking 'github:feel-co/ncro/f224e3e8852cebbe1f74a2d43537e5e5eece8368?narHash=sha256-MYNywU2QeJ22mb3nd18TVrJQAPfDaI1ZGYj/QVh8mhw%3D' into the Git cache...
copying path '/nix/store/hapmafc7idql333c350rhda0azc45ma4-source' from 'http://localhost:5000'...
unpacking 'github:ryantm/agenix/3daa710894355fa2fad8243380af373a2b4046ef?narHash=sha256-n7wew722m1OTBT9DOIMxNX/NF4zfsSUABAO5eW3wikE%3D' into the Git cache...
copying path '/nix/store/adcpmshidndclaz4dxjsgklrx3gqhaxp-source' from 'http://localhost:5000'...
unpacking 'github:catppuccin/nix/2e605f61db52a45a7ff1db414df395ef566565a3?narHash=sha256-hmF0FVrUW6UKQ74qyGJSepMYadnIqzVe2h7TQtZdbmo%3D' into the Git cache...
this derivation will be built:
  /nix/store/rva6sv9wfbgpkwbxmwq6cyz1882g1qlz-config.tf.json.drv
building '/nix/store/rva6sv9wfbgpkwbxmwq6cyz1882g1qlz-config.tf.json.drv'...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing cloudflare/cloudflare v5.27.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.27.0 (unauthenticated)
- Using cloudflare/cloudflare v5.27.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.headplane_cookie: Refreshing state... [id=none]
vault_kv_secret_v2.headplane_cookie: Refreshing state... [id=secret/data/infra/headplane-cookie]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.headplane: Refreshing state... [id=40d2dbf9-409b-4edc-974c-85d5e939efac]
data.cloudflare_zones.all: Reading...
keycloak_openid_client.headscale: Refreshing state... [id=f2875c14-dfff-4fd4-b60b-4d1e066aaeb8]
keycloak_openid_group_membership_protocol_mapper.headplane_groups: Refreshing state... [id=fd683ca7-ed77-44f1-b3cc-47241ccb6fb7]
vault_kv_secret_v2.headplane_oidc: Refreshing state... [id=secret/data/infra/headplane-oidc]
vault_kv_secret_v2.headscale_oidc: Refreshing state... [id=secret/data/infra/headscale-oidc]
keycloak_openid_group_membership_protocol_mapper.headscale_groups: Refreshing state... [id=f091397a-9b6e-4887-9913-12fb542d7210]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["headplane"]: Refreshing state... [id=9139cfa1f058db85d837defe0460fd20]
cloudflare_dns_record.this["headscale"]: Refreshing state... [id=4207dabef0c8dc1972f9d5aa1cd17a00]

OpenTofu used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place (current -> planned)

OpenTofu will perform the following actions:

  # cloudflare_dns_record.this["headplane"] will be updated in-place
!   resource "cloudflare_dns_record" "this" {
        id                      = "9139cfa1f058db85d837defe0460fd20"
+       include_shadow_metadata = false
        name                    = "headplane.scottylabs.org"
        tags                    = []
        # (12 unchanged attributes hidden)
    }

  # cloudflare_dns_record.this["headscale"] will be updated in-place
!   resource "cloudflare_dns_record" "this" {
        id                      = "4207dabef0c8dc1972f9d5aa1cd17a00"
+       include_shadow_metadata = false
        name                    = "headscale.scottylabs.org"
        tags                    = []
        # (12 unchanged attributes hidden)
    }

Plan: 0 to add, 2 to change, 0 to destroy.

─────────────────────────────────────────────────────────────────────────────

Saved the plan to:
/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/headscale/headscale-headscale.tfplan

To perform exactly these actions, run the following command to apply:
    tofu apply "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/headscale/headscale-headscale.tfplan"

• ▶️ To apply this plan, comment:

  atlantis apply -p headscale
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p headscale
  

Plan: 0 to add, 2 to change, 0 to destroy.

---

15. project: hosts dir: . workspace: hosts

Show Output

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/0cb729ebf55dd091fac47575a867afa3c2b642db1d8bb945df61e748eabb1f63.sqlite' is busy
copying path '/nix/store/900imzbxbcbp9ajbw96k9q6a65v7wi99-source' from 'http://localhost:5000'...
unpacking 'github:feel-co/ncro/f224e3e8852cebbe1f74a2d43537e5e5eece8368?narHash=sha256-MYNywU2QeJ22mb3nd18TVrJQAPfDaI1ZGYj/QVh8mhw%3D' into the Git cache...
copying path '/nix/store/hapmafc7idql333c350rhda0azc45ma4-source' from 'http://localhost:5000'...
unpacking 'github:ryantm/agenix/3daa710894355fa2fad8243380af373a2b4046ef?narHash=sha256-n7wew722m1OTBT9DOIMxNX/NF4zfsSUABAO5eW3wikE%3D' into the Git cache...
copying path '/nix/store/adcpmshidndclaz4dxjsgklrx3gqhaxp-source' from 'http://localhost:5000'...
unpacking 'github:catppuccin/nix/2e605f61db52a45a7ff1db414df395ef566565a3?narHash=sha256-hmF0FVrUW6UKQ74qyGJSepMYadnIqzVe2h7TQtZdbmo%3D' into the Git cache...
copying path '/nix/store/8ggr67sci43hlp8ba6rhjrdhhj5490am-source' from 'http://localhost:5000'...
this derivation will be built:
  /nix/store/fmwxyhk7c8fzxca8cp48s467y2w9qaz1-config.tf.json.drv
building '/nix/store/fmwxyhk7c8fzxca8cp48s467y2w9qaz1-config.tf.json.drv'...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Installing cloudflare/cloudflare v5.27.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.27.0 (unauthenticated)
- Using cloudflare/cloudflare v5.27.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Reading...
data.cloudflare_zones.all: Read complete after 1s
cloudflare_zone_setting.always_use_https["78a8413b3e73553f7def8cefe1bdc386"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["97416783adc55489c6f601bbfaa48936"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["a3c2419a7e47cdc909022c5815310013"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["9746fc8415923e40c5961ad58708e7f6"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["dfe11e930ca4ef3d94cd9f79072315cd"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["4585d8c6e8c50f8e8450c220783d6cc3"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["a0686a6fe9f1e181d0c1dcdf9c293a9b"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["03d47c74036171bb4a0ad2679adf7ca5"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["acfb686acc0532474d7f379317afb648"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["c304ee4431d1d2c0313343aff8ffc338"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["ab365d7cec88f972e0b26bf59afd174f"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["c46bbc75077117690939c20f203a3c00"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["eacdf87531ae2114049a9585ab73ef9d"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["50f297e4046f66a46bcb445f9b92f2c3"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["55c7eec3f2a44b6b943962682d1d1953"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["2bf8696c7e2fdc56f9b9e98443f001cc"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["3b8197fed31cd2c5f52b2bbbe8b1fa0f"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["261d3e0e93bb02ae1e6f31c7b09c6441"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["6a38c25604c09abe30baff7e2176a673"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["5ec9401ebede43c78ad0167fefd3b862"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["9ae67b02fb7f5a546a8fd18527115ea5"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["90331dc9edd007e59c828faa3b8d73a9"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["b485862979e222b68b5980cc50e8c63b"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["dbedf6cff671263c0d6f69b482895ee4"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["98d2138c49ff1067e6fc6146febadcca"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["5c2e7faf46bf72319da6cdffadca7f43"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["706d92947e0941effeffd392637f97a2"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["2d4a1424a61322658b5e478b6f563e26"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["d8546107eab7e3bf8d413759c28b66c2"]: Refreshing state... [id=always_use_https]
cloudflare_dns_record.this["infra-01"]: Refreshing state... [id=30f50d5655d03d54b472480be1476c1c]
cloudflare_dns_record.this["infra-02"]: Refreshing state... [id=1856c054b772a4ac62e0f53625163997]
cloudflare_dns_record.this["signage-01"]: Refreshing state... [id=a80079e44697aebac2cbda4ab85a79ee]
cloudflare_dns_record.this["snoopy"]: Refreshing state... [id=7f849c841bba1c0d46009308acaf7f55]
cloudflare_dns_record.this["deploy-01"]: Refreshing state... [id=bcb794198cc3e1ad25e3707e3af7fd1d]

OpenTofu used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place (current -> planned)

OpenTofu will perform the following actions:

  # cloudflare_dns_record.this["deploy-01"] will be updated in-place
!   resource "cloudflare_dns_record" "this" {
        id                      = "bcb794198cc3e1ad25e3707e3af7fd1d"
+       include_shadow_metadata = false
        name                    = "deploy-01.scottylabs.org"
        tags                    = []
        # (12 unchanged attributes hidden)
    }

  # cloudflare_dns_record.this["infra-01"] will be updated in-place
!   resource "cloudflare_dns_record" "this" {
        id                      = "30f50d5655d03d54b472480be1476c1c"
+       include_shadow_metadata = false
        name                    = "infra-01.scottylabs.org"
        tags                    = []
        # (12 unchanged attributes hidden)
    }

  # cloudflare_dns_record.this["infra-02"] will be updated in-place
!   resource "cloudflare_dns_record" "this" {
        id                      = "1856c054b772a4ac62e0f53625163997"
+       include_shadow_metadata = false
        name                    = "infra-02.scottylabs.org"
        tags                    = []
        # (12 unchanged attributes hidden)
    }

  # cloudflare_dns_record.this["signage-01"] will be updated in-place
!   resource "cloudflare_dns_record" "this" {
        id                      = "a80079e44697aebac2cbda4ab85a79ee"
+       include_shadow_metadata = false
        name                    = "signage-01.scottylabs.org"
        tags                    = []
        # (12 unchanged attributes hidden)
    }

  # cloudflare_dns_record.this["snoopy"] will be updated in-place
!   resource "cloudflare_dns_record" "this" {
        id                      = "7f849c841bba1c0d46009308acaf7f55"
+       include_shadow_metadata = false
        name                    = "snoopy.scottylabs.org"
        tags                    = []
        # (12 unchanged attributes hidden)
    }

Plan: 0 to add, 5 to change, 0 to destroy.

─────────────────────────────────────────────────────────────────────────────

Saved the plan to:
/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/hosts/hosts-hosts.tfplan

To perform exactly these actions, run the following command to apply:
    tofu apply "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/hosts/hosts-hosts.tfplan"

• ▶️ To apply this plan, comment:

  atlantis apply -p hosts
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p hosts
  

Plan: 0 to add, 5 to change, 0 to destroy.

---

16. project: atlantis dir: . workspace: atlantis

Show Output

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/0cb729ebf55dd091fac47575a867afa3c2b642db1d8bb945df61e748eabb1f63.sqlite' is busy
copying path '/nix/store/900imzbxbcbp9ajbw96k9q6a65v7wi99-source' from 'http://localhost:5000'...
unpacking 'github:feel-co/ncro/f224e3e8852cebbe1f74a2d43537e5e5eece8368?narHash=sha256-MYNywU2QeJ22mb3nd18TVrJQAPfDaI1ZGYj/QVh8mhw%3D' into the Git cache...
copying path '/nix/store/hapmafc7idql333c350rhda0azc45ma4-source' from 'http://localhost:5000'...
unpacking 'github:ryantm/agenix/3daa710894355fa2fad8243380af373a2b4046ef?narHash=sha256-n7wew722m1OTBT9DOIMxNX/NF4zfsSUABAO5eW3wikE%3D' into the Git cache...
copying path '/nix/store/adcpmshidndclaz4dxjsgklrx3gqhaxp-source' from 'http://localhost:5000'...
unpacking 'github:catppuccin/nix/2e605f61db52a45a7ff1db414df395ef566565a3?narHash=sha256-hmF0FVrUW6UKQ74qyGJSepMYadnIqzVe2h7TQtZdbmo%3D' into the Git cache...
this derivation will be built:
  /nix/store/w1hcdipws1ax6kin183dx7a4wviwg2qv-config.tf.json.drv
building '/nix/store/w1hcdipws1ax6kin183dx7a4wviwg2qv-config.tf.json.drv'...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding svalabs/forgejo versions matching "~> 1.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Installing cloudflare/cloudflare v5.27.0 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installing svalabs/forgejo v1.6.1 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed svalabs/forgejo v1.6.1 (unauthenticated)
- Using svalabs/forgejo v1.6.1 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.27.0 (unauthenticated)
- Using cloudflare/cloudflare v5.27.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│   - svalabs/forgejo
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.atlantis_webhook_secret: Refreshing state... [id=none]
vault_kv_secret_v2.atlantis_webhook: Refreshing state... [id=secret/data/infra/atlantis]
data.forgejo_repository.governance: Reading...
data.forgejo_repository.infrastructure: Reading...
data.forgejo_repository.governance: Read complete after 0s [name=governance]
forgejo_repository_webhook.governance: Refreshing state...
data.forgejo_repository.infrastructure: Read complete after 0s [name=infrastructure]
forgejo_repository_webhook.infrastructure: Refreshing state...
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["atlantis"]: Refreshing state... [id=d0419d10a0c0bb715bcbadc7a1c73cbb]

OpenTofu used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place (current -> planned)

OpenTofu will perform the following actions:

  # cloudflare_dns_record.this["atlantis"] will be updated in-place
!   resource "cloudflare_dns_record" "this" {
        id                      = "d0419d10a0c0bb715bcbadc7a1c73cbb"
+       include_shadow_metadata = false
        name                    = "atlantis.scottylabs.org"
        tags                    = []
        # (12 unchanged attributes hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

─────────────────────────────────────────────────────────────────────────────

Saved the plan to:
/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/atlantis/atlantis-atlantis.tfplan

To perform exactly these actions, run the following command to apply:
    tofu apply "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/atlantis/atlantis-atlantis.tfplan"

• ▶️ To apply this plan, comment:

  atlantis apply -p atlantis
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p atlantis
  

Plan: 0 to add, 1 to change, 0 to destroy.

---

17. project: openbao dir: . workspace: openbao

Show Output

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/0cb729ebf55dd091fac47575a867afa3c2b642db1d8bb945df61e748eabb1f63.sqlite' is busy
copying path '/nix/store/900imzbxbcbp9ajbw96k9q6a65v7wi99-source' from 'http://localhost:5000'...
unpacking 'github:feel-co/ncro/f224e3e8852cebbe1f74a2d43537e5e5eece8368?narHash=sha256-MYNywU2QeJ22mb3nd18TVrJQAPfDaI1ZGYj/QVh8mhw%3D' into the Git cache...
copying path '/nix/store/hapmafc7idql333c350rhda0azc45ma4-source' from 'http://localhost:5000'...
unpacking 'github:ryantm/agenix/3daa710894355fa2fad8243380af373a2b4046ef?narHash=sha256-n7wew722m1OTBT9DOIMxNX/NF4zfsSUABAO5eW3wikE%3D' into the Git cache...
copying path '/nix/store/adcpmshidndclaz4dxjsgklrx3gqhaxp-source' from 'http://localhost:5000'...
unpacking 'github:catppuccin/nix/2e605f61db52a45a7ff1db414df395ef566565a3?narHash=sha256-hmF0FVrUW6UKQ74qyGJSepMYadnIqzVe2h7TQtZdbmo%3D' into the Git cache...
this derivation will be built:
  /nix/store/n0nixw625rwyyssl713dlb8i6fx3k9mq-config.tf.json.drv
building '/nix/store/n0nixw625rwyyssl713dlb8i6fx3k9mq-config.tf.json.drv'...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Installing cloudflare/cloudflare v5.27.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.27.0 (unauthenticated)
- Using cloudflare/cloudflare v5.27.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
vault_policy.ci: Refreshing state... [id=ci]
vault_policy.infra: Refreshing state... [id=infra]
vault_mount.kv: Refreshing state... [id=secret]
vault_jwt_auth_backend.forgejo: Refreshing state... [id=jwt]
vault_auth_backend.approle: Refreshing state... [id=approle]
vault_policy.devops: Refreshing state... [id=devops]
vault_policy.shared_read: Refreshing state... [id=shared-read]
vault_identity_group.all_members: Refreshing state... [id=17a94032-1dfa-8c66-af1f-ac3942f8d13f]
vault_approle_auth_backend_role.host["infra-01"]: Refreshing state... [id=auth/approle/role/infra-01]
vault_approle_auth_backend_role.host["snoopy"]: Refreshing state... [id=auth/approle/role/snoopy]
vault_approle_auth_backend_role.host["signage-01"]: Refreshing state... [id=auth/approle/role/signage-01]
vault_identity_group.devops: Refreshing state... [id=6922ccb6-70c2-acef-0580-49477441e3ff]
vault_kv_secret_v2.cachix: Refreshing state... [id=secret/data/shared/cachix]
vault_approle_auth_backend_role.host["deploy-01"]: Refreshing state... [id=auth/approle/role/deploy-01]
vault_jwt_auth_backend_role.ci: Refreshing state... [id=auth/jwt/role/ci]
data.keycloak_realm.scottylabs: Reading...
data.cloudflare_zones.all: Reading...
data.cloudflare_zones.all: Read complete after 0s
cloudflare_dns_record.this["secrets"]: Refreshing state... [id=c24ad8899e7a3b573f1d2d7b95711926]
data.keycloak_realm.scottylabs: Read complete after 5s [id=scottylabs]
keycloak_openid_client.openbao: Refreshing state... [id=86926066-77c5-458e-be5a-cb585b75c818]
keycloak_openid_group_membership_protocol_mapper.openbao_groups: Refreshing state... [id=cafd878e-dbc6-4376-95de-f09c2e5b9870]
vault_jwt_auth_backend.oidc: Refreshing state... [id=oidc]
vault_identity_group_alias.all_members: Refreshing state... [id=3371c9f2-3d4b-eafe-20e5-f2bfed63fdb9]
vault_identity_group_alias.devops: Refreshing state... [id=f7f8c2b9-125e-5c92-efda-361e93cd2d2a]
vault_jwt_auth_backend_role.default: Refreshing state... [id=auth/oidc/role/default]

OpenTofu used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place (current -> planned)

OpenTofu will perform the following actions:

  # cloudflare_dns_record.this["secrets"] will be updated in-place
!   resource "cloudflare_dns_record" "this" {
        id                      = "c24ad8899e7a3b573f1d2d7b95711926"
+       include_shadow_metadata = false
        name                    = "secrets.scottylabs.org"
        tags                    = []
        # (12 unchanged attributes hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

─────────────────────────────────────────────────────────────────────────────

Saved the plan to:
/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/openbao/openbao-openbao.tfplan

To perform exactly these actions, run the following command to apply:
    tofu apply "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/openbao/openbao-openbao.tfplan"

• ▶️ To apply this plan, comment:

  atlantis apply -p openbao
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p openbao
  

Plan: 0 to add, 1 to change, 0 to destroy.

---

Plan Summary

17 projects, 14 with changes, 1 with no changes, 2 failed

• ⏩ To apply all unapplied plans from this Pull Request, comment:

  atlantis apply
  

• 🚮 To delete all plans and locks from this Pull Request, comment:

  atlantis unlock
  

Ran Plan for 17 projects: 1. project: `posthog` dir: `.` workspace: `posthog` 1. project: `snot` dir: `.` workspace: `snot` 1. project: `forgejo` dir: `.` workspace: `forgejo` 1. project: `governance` dir: `.` workspace: `governance` 1. project: `ricochet` dir: `.` workspace: `ricochet` 1. project: `litellm` dir: `.` workspace: `litellm` 1. project: `matrix` dir: `.` workspace: `matrix` 1. project: `webhook` dir: `.` workspace: `webhook` 1. project: `kennel` dir: `.` workspace: `kennel` 1. project: `observability` dir: `.` workspace: `observability` 1. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin` 1. project: `keycloak` dir: `.` workspace: `keycloak` 1. project: `vaultwarden` dir: `.` workspace: `vaultwarden` 1. project: `headscale` dir: `.` workspace: `headscale` 1. project: `hosts` dir: `.` workspace: `hosts` 1. project: `atlantis` dir: `.` workspace: `atlantis` 1. project: `openbao` dir: `.` workspace: `openbao` --- ### 1. project: `posthog` dir: `.` workspace: `posthog` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of posthog/posthog from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed posthog/posthog v1.0.24 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.27.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ posthog_proxy_record.v: Refreshing state... [id=019cbbe2-8cae-0000-72a0-b7884cc7ec9e] data.keycloak_realm.scottylabs: Reading... data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["v"]: Refreshing state... [id=a34d75a85d3128693767b2db9b7f233e] OpenTofu used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols: ~ update in-place (current -> planned) OpenTofu will perform the following actions: # cloudflare_dns_record.this["v"] will be updated in-place ! resource "cloudflare_dns_record" "this" { id = "a34d75a85d3128693767b2db9b7f233e" + include_shadow_metadata = false name = "v.scottylabs.org" tags = [] # (12 unchanged attributes hidden) } Plan: 0 to add, 1 to change, 0 to destroy. ───────────────────────────────────────────────────────────────────────────── Saved the plan to: /var/lib/atlantis/repos/ScottyLabs/infrastructure/159/posthog/posthog-posthog.tfplan To perform exactly these actions, run the following command to apply: tofu apply "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/posthog/posthog-posthog.tfplan" ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p posthog ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fposthog%252Fposthog) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p posthog ``` Plan: 0 to add, 1 to change, 0 to destroy. --- ### 2. project: `snot` dir: `.` workspace: `snot` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/0cb729ebf55dd091fac47575a867afa3c2b642db1d8bb945df61e748eabb1f63.sqlite' is busy this derivation will be built: /nix/store/84wji4lms5vrqg3j880pz78n5pbpwy8d-config.tf.json.drv building '/nix/store/84wji4lms5vrqg3j880pz78n5pbpwy8d-config.tf.json.drv'... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing cloudflare/cloudflare v5.27.0 to the shared cache directory... - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.27.0 (unauthenticated) - Using cloudflare/cloudflare v5.27.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.keycloak_realm.scottylabs: Reading... data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Read complete after 0s cloudflare_dns_record.this["knot"]: Refreshing state... [id=264276915648465296ad9d24fb70a29b] OpenTofu used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols: ~ update in-place (current -> planned) OpenTofu will perform the following actions: # cloudflare_dns_record.this["knot"] will be updated in-place ! resource "cloudflare_dns_record" "this" { id = "264276915648465296ad9d24fb70a29b" + include_shadow_metadata = false name = "knot.cmu.dev" tags = [] # (12 unchanged attributes hidden) } Plan: 0 to add, 1 to change, 0 to destroy. ───────────────────────────────────────────────────────────────────────────── Saved the plan to: /var/lib/atlantis/repos/ScottyLabs/infrastructure/159/snot/snot-snot.tfplan To perform exactly these actions, run the following command to apply: tofu apply "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/snot/snot-snot.tfplan" ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p snot ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fsnot%252Fsnot) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p snot ``` Plan: 0 to add, 1 to change, 0 to destroy. --- ### 3. project: `forgejo` dir: `.` workspace: `forgejo` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/0cb729ebf55dd091fac47575a867afa3c2b642db1d8bb945df61e748eabb1f63.sqlite' is busy this derivation will be built: /nix/store/24varw0gqxpazwfbr6s9dmxs9vyirs3p-config.tf.json.drv building '/nix/store/24varw0gqxpazwfbr6s9dmxs9vyirs3p-config.tf.json.drv'... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Installing cloudflare/cloudflare v5.27.0 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.27.0 (unauthenticated) - Using cloudflare/cloudflare v5.27.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... garage_bucket.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960] garage_key.forgejo: Refreshing state... [id=GKea9810d648000e3e3b8df725] garage_bucket_permission.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960/GKea9810d648000e3e3b8df725] vault_kv_secret_v2.forgejo_storage: Refreshing state... [id=secret/data/infra/forgejo-storage] data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.forgejo: Refreshing state... [id=110b9b02-18e1-4bac-b5ce-936bbfbc83d6] keycloak_openid_group_membership_protocol_mapper.forgejo_groups: Refreshing state... [id=72c7154f-372d-4a39-97c0-6516a88d6198] vault_kv_secret_v2.forgejo_oidc: Refreshing state... [id=secret/data/infra/forgejo-oidc] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["git"]: Refreshing state... [id=f0fa6f4acf6bf381474c1a9304225f68] OpenTofu used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols: ~ update in-place (current -> planned) OpenTofu will perform the following actions: # cloudflare_dns_record.this["git"] will be updated in-place ! resource "cloudflare_dns_record" "this" { id = "f0fa6f4acf6bf381474c1a9304225f68" + include_shadow_metadata = false name = "git.cmu.dev" tags = [] # (12 unchanged attributes hidden) } Plan: 0 to add, 1 to change, 0 to destroy. ───────────────────────────────────────────────────────────────────────────── Saved the plan to: /var/lib/atlantis/repos/ScottyLabs/infrastructure/159/forgejo/forgejo-forgejo.tfplan To perform exactly these actions, run the following command to apply: tofu apply "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/forgejo/forgejo-forgejo.tfplan" ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p forgejo ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fforgejo%252Fforgejo) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p forgejo ``` Plan: 0 to add, 1 to change, 0 to destroy. --- ### 4. project: `governance` dir: `.` workspace: `governance` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/0cb729ebf55dd091fac47575a867afa3c2b642db1d8bb945df61e748eabb1f63.sqlite' is busy this derivation will be built: /nix/store/l6zlv2f2w72md5b5qzczvp0vvg0h30k0-config.tf.json.drv building '/nix/store/l6zlv2f2w72md5b5qzczvp0vvg0h30k0-config.tf.json.drv'... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing cloudflare/cloudflare v5.27.0 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.27.0 (unauthenticated) - Using cloudflare/cloudflare v5.27.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ vault_kv_secret_v2.governance_ci_bot_token: Refreshing state... [id=secret/data/secretspec/governance/ci/BOT_TOKEN] vault_policy.governance: Refreshing state... [id=governance] vault_approle_auth_backend_role.governance: Refreshing state... [id=auth/approle/role/governance] data.keycloak_realm.scottylabs: Reading... data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.governance_cli: Refreshing state... [id=f19d0308-19a8-4fc4-aa5f-f909fc38c5fe] data.keycloak_openid_client.realm_management: Reading... data.keycloak_openid_client.realm_management: Read complete after 0s [id=a0a15f13-b554-4bed-9fb2-3e63e0301278] keycloak_openid_client_service_account_role.governance_cli_realm_management["query-clients"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/16d40468-7ba1-4f17-ba0d-0741880f291a] keycloak_openid_client_service_account_role.governance_cli_realm_management["manage-clients"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/366f6242-2ce3-4be8-b861-3561e3c4b865] keycloak_openid_client_service_account_role.governance_cli_realm_management["manage-users"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/eb96eb71-82eb-4317-b8f5-326472e11484] keycloak_openid_client_service_account_role.governance_cli_realm_management["view-users"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/65f4c673-fc55-430c-b4b6-fd14ed151966] vault_kv_secret_v2.governance_ci_keycloak_client_secret: Refreshing state... [id=secret/data/secretspec/governance/ci/KEYCLOAK_CLIENT_SECRET] vault_kv_secret_v2.governance_ci_keycloak_client_id: Refreshing state... [id=secret/data/secretspec/governance/ci/KEYCLOAK_CLIENT_ID] data.cloudflare_zones.all: Read complete after 1s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p governance ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fgovernance%252Fgovernance) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p governance ``` No changes. Your infrastructure matches the configuration. --- ### 5. project: `ricochet` dir: `.` workspace: `ricochet` **Plan Error** <details><summary>Show Output</summary> ``` running 'sh -c' 'nix build ".#$PROJECT_NAME.config" --out-link config.tf.json' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/ricochet': exit status 1: running "nix build \".#$PROJECT_NAME.config\" --out-link config.tf.json" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/ricochet": warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/0cb729ebf55dd091fac47575a867afa3c2b642db1d8bb945df61e748eabb1f63.sqlite' is busy copying path '/nix/store/900imzbxbcbp9ajbw96k9q6a65v7wi99-source' from 'http://localhost:5000'... remote: Enumerating objects: 130, done. remote: Counting objects: 0% (1/130) remote: Counting objects: 1% (2/130) remote: Counting objects: 2% (3/130) remote: Counting objects: 3% (4/130) remote: Counting objects: 4% (6/130) remote: Counting objects: 5% (7/130) remote: Counting objects: 6% (8/130) remote: Counting objects: 7% (10/130) remote: Counting objects: 8% (11/130) remote: Counting objects: 9% (12/130) remote: Counting objects: 10% (13/130) remote: Counting objects: 11% (15/130) remote: Counting objects: 12% (16/130) remote: Counting objects: 13% (17/130) remote: Counting objects: 14% (19/130) remote: Counting objects: 15% (20/130) remote: Counting objects: 16% (21/130) remote: Counting objects: 17% (23/130) remote: Counting objects: 18% (24/130) remote: Counting objects: 19% (25/130) remote: Counting objects: 20% (26/130) remote: Counting objects: 21% (28/130) remote: Counting objects: 22% (29/130) remote: Counting objects: 23% (30/130) remote: Counting objects: 24% (32/130) remote: Counting objects: 25% (33/130) remote: Counting objects: 26% (34/130) remote: Counting objects: 27% (36/130) remote: Counting objects: 28% (37/130) remote: Counting objects: 29% (38/130) remote: Counting objects: 30% (39/130) remote: Counting objects: 31% (41/130) remote: Counting objects: 32% (42/130) remote: Counting objects: 33% (43/130) remote: Counting objects: 34% (45/130) remote: Counting objects: 35% (46/130) remote: Counting objects: 36% (47/130) remote: Counting objects: 37% (49/130) remote: Counting objects: 38% (50/130) remote: Counting objects: 39% (51/130) remote: Counting objects: 40% (52/130) remote: Counting objects: 41% (54/130) remote: Counting objects: 42% (55/130) remote: Counting objects: 43% (56/130) remote: Counting objects: 44% (58/130) remote: Counting objects: 45% (59/130) remote: Counting objects: 46% (60/130) remote: Counting objects: 47% (62/130) remote: Counting objects: 48% (63/130) remote: Counting objects: 49% (64/130) remote: Counting objects: 50% (65/130) remote: Counting objects: 51% (67/130) remote: Counting objects: 52% (68/130) remote: Counting objects: 53% (69/130) remote: Counting objects: 54% (71/130) remote: Counting objects: 55% (72/130) remote: Counting objects: 56% (73/130) remote: Counting objects: 57% (75/130) remote: Counting objects: 58% (76/130) remote: Counting objects: 59% (77/130) remote: Counting objects: 60% (78/130) remote: Counting objects: 61% (80/130) remote: Counting objects: 62% (81/130) remote: Counting objects: 63% (82/130) remote: Counting objects: 64% (84/130) remote: Counting objects: 65% (85/130) remote: Counting objects: 66% (86/130) remote: Counting objects: 67% (88/130) remote: Counting objects: 68% (89/130) remote: Counting objects: 69% (90/130) remote: Counting objects: 70% (91/130) remote: Counting objects: 71% (93/130) remote: Counting objects: 72% (94/130) remote: Counting objects: 73% (95/130) remote: Counting objects: 74% (97/130) remote: Counting objects: 75% (98/130) remote: Counting objects: 76% (99/130) remote: Counting objects: 77% (101/130) remote: Counting objects: 78% (102/130) remote: Counting objects: 79% (103/130) remote: Counting objects: 80% (104/130) remote: Counting objects: 81% (106/130) remote: Counting objects: 82% (107/130) remote: Counting objects: 83% (108/130) remote: Counting objects: 84% (110/130) remote: Counting objects: 85% (111/130) remote: Counting objects: 86% (112/130) remote: Counting objects: 87% (114/130) remote: Counting objects: 88% (115/130) remote: Counting objects: 89% (116/130) remote: Counting objects: 90% (117/130) remote: Counting objects: 91% (119/130) remote: Counting objects: 92% (120/130) remote: Counting objects: 93% (121/130) remote: Counting objects: 94% (123/130) remote: Counting objects: 95% (124/130) remote: Counting objects: 96% (125/130) remote: Counting objects: 97% (127/130) remote: Counting objects: 98% (128/130) remote: Counting objects: 99% (129/130) remote: Counting objects: 100% (130/130) remote: Counting objects: 100% (130/130), done. remote: Compressing objects: 0% (1/126) remote: Compressing objects: 1% (2/126) remote: Compressing objects: 2% (3/126) remote: Compressing objects: 3% (4/126) remote: Compressing objects: 4% (6/126) remote: Compressing objects: 5% (7/126) remote: Compressing objects: 6% (8/126) remote: Compressing objects: 7% (9/126) remote: Compressing objects: 8% (11/126) remote: Compressing objects: 9% (12/126) remote: Compressing objects: 10% (13/126) remote: Compressing objects: 11% (14/126) remote: Compressing objects: 12% (16/126) remote: Compressing objects: 13% (17/126) remote: Compressing objects: 14% (18/126) remote: Compressing objects: 15% (19/126) remote: Compressing objects: 16% (21/126) remote: Compressing objects: 17% (22/126) remote: Compressing objects: 18% (23/126) remote: Compressing objects: 19% (24/126) remote: Compressing objects: 20% (26/126) remote: Compressing objects: 21% (27/126) remote: Compressing objects: 22% (28/126) remote: Compressing objects: 23% (29/126) remote: Compressing objects: 24% (31/126) remote: Compressing objects: 25% (32/126) remote: Compressing objects: 26% (33/126) remote: Compressing objects: 27% (35/126) remote: Compressing objects: 28% (36/126) remote: Compressing objects: 29% (37/126) remote: Compressing objects: 30% (38/126) remote: Compressing objects: 31% (40/126) remote: Compressing objects: 32% (41/126) remote: Compressing objects: 33% (42/126) remote: Compressing objects: 34% (43/126) remote: Compressing objects: 35% (45/126) remote: Compressing objects: 36% (46/126) remote: Compressing objects: 37% (47/126) remote: Compressing objects: 38% (48/126) remote: Compressing objects: 39% (50/126) remote: Compressing objects: 40% (51/126) remote: Compressing objects: 41% (52/126) remote: Compressing objects: 42% (53/126) remote: Compressing objects: 43% (55/126) remote: Compressing objects: 44% (56/126) remote: Compressing objects: 45% (57/126) remote: Compressing objects: 46% (58/126) remote: Compressing objects: 47% (60/126) remote: Compressing objects: 48% (61/126) remote: Compressing objects: 49% (62/126) remote: Compressing objects: 50% (63/126) remote: Compressing objects: 51% (65/126) remote: Compressing objects: 52% (66/126) remote: Compressing objects: 53% (67/126) remote: Compressing objects: 54% (69/126) remote: Compressing objects: 55% (70/126) remote: Compressing objects: 56% (71/126) remote: Compressing objects: 57% (72/126) remote: Compressing objects: 58% (74/126) remote: Compressing objects: 59% (75/126) remote: Compressing objects: 60% (76/126) remote: Compressing objects: 61% (77/126) remote: Compressing objects: 62% (79/126) remote: Compressing objects: 63% (80/126) remote: Compressing objects: 64% (81/126) remote: Compressing objects: 65% (82/126) remote: Compressing objects: 66% (84/126) remote: Compressing objects: 67% (85/126) remote: Compressing objects: 68% (86/126) remote: Compressing objects: 69% (87/126) remote: Compressing objects: 70% (89/126) remote: Compressing objects: 71% (90/126) remote: Compressing objects: 72% (91/126) remote: Compressing objects: 73% (92/126) remote: Compressing objects: 74% (94/126) remote: Compressing objects: 75% (95/126) remote: Compressing objects: 76% (96/126) remote: Compressing objects: 77% (98/126) remote: Compressing objects: 78% (99/126) remote: Compressing objects: 79% (100/126) remote: Compressing objects: 80% (101/126) remote: Compressing objects: 81% (103/126) remote: Compressing objects: 82% (104/126) remote: Compressing objects: 83% (105/126) remote: Compressing objects: 84% (106/126) remote: Compressing objects: 85% (108/126) remote: Compressing objects: 86% (109/126) remote: Compressing objects: 87% (110/126) remote: Compressing objects: 88% (111/126) remote: Compressing objects: 89% (113/126) remote: Compressing objects: 90% (114/126) remote: Compressing objects: 91% (115/126) remote: Compressing objects: 92% (116/126) remote: Compressing objects: 93% (118/126) remote: Compressing objects: 94% (119/126) remote: Compressing objects: 95% (120/126) remote: Compressing objects: 96% (121/126) remote: Compressing objects: 97% (123/126) remote: Compressing objects: 98% (124/126) remote: Compressing objects: 99% (125/126) remote: Compressing objects: 100% (126/126) remote: Compressing objects: 100% (126/126), done. Receiving objects: 0% (1/130) Receiving objects: 1% (2/130) Receiving objects: 2% (3/130) Receiving objects: 3% (4/130) Receiving objects: 4% (6/130) Receiving objects: 5% (7/130) Receiving objects: 6% (8/130) Receiving objects: 7% (10/130) Receiving objects: 8% (11/130) Receiving objects: 9% (12/130) Receiving objects: 10% (13/130) Receiving objects: 11% (15/130) Receiving objects: 12% (16/130) Receiving objects: 13% (17/130) Receiving objects: 14% (19/130) Receiving objects: 15% (20/130) Receiving objects: 16% (21/130) Receiving objects: 17% (23/130) Receiving objects: 18% (24/130) Receiving objects: 19% (25/130) Receiving objects: 20% (26/130) Receiving objects: 21% (28/130) Receiving objects: 22% (29/130) Receiving objects: 23% (30/130) Receiving objects: 24% (32/130) Receiving objects: 25% (33/130) Receiving objects: 26% (34/130) Receiving objects: 27% (36/130) Receiving objects: 28% (37/130) Receiving objects: 29% (38/130) Receiving objects: 30% (39/130) Receiving objects: 31% (41/130) Receiving objects: 32% (42/130) Receiving objects: 33% (43/130) remote: Total 130 (delta 8), reused 22 (delta 0), pack-reused 0 (from 0) Receiving objects: 34% (45/130) Receiving objects: 35% (46/130) Receiving objects: 36% (47/130) Receiving objects: 37% (49/130) Receiving objects: 38% (50/130) Receiving objects: 39% (51/130) Receiving objects: 40% (52/130) Receiving objects: 41% (54/130) Receiving objects: 42% (55/130) Receiving objects: 43% (56/130) Receiving objects: 44% (58/130) Receiving objects: 45% (59/130) Receiving objects: 46% (60/130) Receiving objects: 47% (62/130) Receiving objects: 48% (63/130) Receiving objects: 49% (64/130) Receiving objects: 50% (65/130) Receiving objects: 51% (67/130) Receiving objects: 52% (68/130) Receiving objects: 53% (69/130) Receiving objects: 54% (71/130) Receiving objects: 55% (72/130) Receiving objects: 56% (73/130) Receiving objects: 57% (75/130) Receiving objects: 58% (76/130) Receiving objects: 59% (77/130) Receiving objects: 60% (78/130) Receiving objects: 61% (80/130) Receiving objects: 62% (81/130) Receiving objects: 63% (82/130) Receiving objects: 64% (84/130) Receiving objects: 65% (85/130) Receiving objects: 66% (86/130) Receiving objects: 67% (88/130) Receiving objects: 68% (89/130) Receiving objects: 69% (90/130) Receiving objects: 70% (91/130) Receiving objects: 71% (93/130) Receiving objects: 72% (94/130) Receiving objects: 73% (95/130) Receiving objects: 74% (97/130) Receiving objects: 75% (98/130) Receiving objects: 76% (99/130) Receiving objects: 77% (101/130) Receiving objects: 78% (102/130) Receiving objects: 79% (103/130) Receiving objects: 80% (104/130) Receiving objects: 81% (106/130) Receiving objects: 82% (107/130) Receiving objects: 83% (108/130) Receiving objects: 84% (110/130) Receiving objects: 85% (111/130) Receiving objects: 86% (112/130) Receiving objects: 87% (114/130) Receiving objects: 88% (115/130) Receiving objects: 89% (116/130) Receiving objects: 90% (117/130) Receiving objects: 91% (119/130) Receiving objects: 92% (120/130) Receiving objects: 93% (121/130) Receiving objects: 94% (123/130) Receiving objects: 95% (124/130) Receiving objects: 96% (125/130) Receiving objects: 97% (127/130) Receiving objects: 98% (128/130) Receiving objects: 99% (129/130) Receiving objects: 100% (130/130) Receiving objects: 100% (130/130), 153.22 KiB | 13.93 MiB/s, done. Resolving deltas: 0% (0/8) Resolving deltas: 12% (1/8) Resolving deltas: 25% (2/8) Resolving deltas: 37% (3/8) Resolving deltas: 50% (4/8) Resolving deltas: 62% (5/8) Resolving deltas: 75% (6/8) Resolving deltas: 87% (7/8) Resolving deltas: 100% (8/8) Resolving deltas: 100% (8/8), done. From https://git.cmu.dev/ScottyLabs/kennel * branch a2c082d5ffc53e50a68216a8a380e5603908061d -> FETCH_HEAD unpacking 'github:feel-co/ncro/f224e3e8852cebbe1f74a2d43537e5e5eece8368?narHash=sha256-MYNywU2QeJ22mb3nd18TVrJQAPfDaI1ZGYj/QVh8mhw%3D' into the Git cache... copying path '/nix/store/hapmafc7idql333c350rhda0azc45ma4-source' from 'http://localhost:5000'... unpacking 'github:ryantm/agenix/3daa710894355fa2fad8243380af373a2b4046ef?narHash=sha256-n7wew722m1OTBT9DOIMxNX/NF4zfsSUABAO5eW3wikE%3D' into the Git cache... error: … while calling the 'derivationStrict' builtin at «nix-internal»/derivation-internal.nix:37:12: 36| 37| strict = derivationStrict drvAttrs; | ^ 38| … while evaluating derivation 'config.tf.json' whose name attribute is located at «github:NixOS/nixpkgs/7fd4004d0511991fff3a0524856a9be09e28c5f0?narHash=sha256-i5qk1kLiit98rRbh1AXmWBNT9QXC/y4l5Wk/u5EdpDQ%3D»/pkgs/stdenv/generic/make-derivation.nix:651:11 … while evaluating attribute 'value' of derivation 'config.tf.json' at «github:NixOS/nixpkgs/7fd4004d0511991fff3a0524856a9be09e28c5f0?narHash=sha256-i5qk1kLiit98rRbh1AXmWBNT9QXC/y4l5Wk/u5EdpDQ%3D»/pkgs/pkgs-lib/formats/json/default.nix:19:23: 18| nativeBuildInputs = [ jq ]; 19| inherit value; | ^ 20| preferLocalBuild = true; … while evaluating definitions from `/nix/store/apf5c6g5l656w29aypcrcxkxhcb2pq38-source/modules/terranix/base.nix, via option flake.modules.terranix.base': (stack trace truncated; use '--show-trace' to show the full, detailed trace) error: getting Git object '3449661c3f5f219cbbc952e3d5d0534fdf736702': object not found - no match for id (3449661c3f5f219cbbc952e3d5d0534fdf736702) (libgit2 error code = 9) ``` </details> --- ### 6. project: `litellm` dir: `.` workspace: `litellm` **Plan Error** <details><summary>Show Output</summary> ``` running 'sh -c' 'nix build ".#$PROJECT_NAME.config" --out-link config.tf.json' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/litellm': exit status 1: running "nix build \".#$PROJECT_NAME.config\" --out-link config.tf.json" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/litellm": warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/0cb729ebf55dd091fac47575a867afa3c2b642db1d8bb945df61e748eabb1f63.sqlite' is busy copying path '/nix/store/900imzbxbcbp9ajbw96k9q6a65v7wi99-source' from 'http://localhost:5000'... unpacking 'github:feel-co/ncro/f224e3e8852cebbe1f74a2d43537e5e5eece8368?narHash=sha256-MYNywU2QeJ22mb3nd18TVrJQAPfDaI1ZGYj/QVh8mhw%3D' into the Git cache... copying path '/nix/store/hapmafc7idql333c350rhda0azc45ma4-source' from 'http://localhost:5000'... unpacking 'github:ryantm/agenix/3daa710894355fa2fad8243380af373a2b4046ef?narHash=sha256-n7wew722m1OTBT9DOIMxNX/NF4zfsSUABAO5eW3wikE%3D' into the Git cache... error: … while calling the 'derivationStrict' builtin at «nix-internal»/derivation-internal.nix:37:12: 36| 37| strict = derivationStrict drvAttrs; | ^ 38| … while evaluating derivation 'config.tf.json' whose name attribute is located at «github:NixOS/nixpkgs/7fd4004d0511991fff3a0524856a9be09e28c5f0?narHash=sha256-i5qk1kLiit98rRbh1AXmWBNT9QXC/y4l5Wk/u5EdpDQ%3D»/pkgs/stdenv/generic/make-derivation.nix:651:11 … while evaluating attribute 'value' of derivation 'config.tf.json' at «github:NixOS/nixpkgs/7fd4004d0511991fff3a0524856a9be09e28c5f0?narHash=sha256-i5qk1kLiit98rRbh1AXmWBNT9QXC/y4l5Wk/u5EdpDQ%3D»/pkgs/pkgs-lib/formats/json/default.nix:19:23: 18| nativeBuildInputs = [ jq ]; 19| inherit value; | ^ 20| preferLocalBuild = true; … while evaluating definitions from `/nix/store/apf5c6g5l656w29aypcrcxkxhcb2pq38-source/modules/terranix/base.nix, via option flake.modules.terranix.base': (stack trace truncated; use '--show-trace' to show the full, detailed trace) error: getting Git object '3449661c3f5f219cbbc952e3d5d0534fdf736702': object not found - no match for id (3449661c3f5f219cbbc952e3d5d0534fdf736702) (libgit2 error code = 9) ``` </details> --- ### 7. project: `matrix` dir: `.` workspace: `matrix` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/0cb729ebf55dd091fac47575a867afa3c2b642db1d8bb945df61e748eabb1f63.sqlite' is busy unpacking 'github:feel-co/ncro/f224e3e8852cebbe1f74a2d43537e5e5eece8368?narHash=sha256-MYNywU2QeJ22mb3nd18TVrJQAPfDaI1ZGYj/QVh8mhw%3D' into the Git cache... copying path '/nix/store/hapmafc7idql333c350rhda0azc45ma4-source' from 'http://localhost:5000'... unpacking 'github:ryantm/agenix/3daa710894355fa2fad8243380af373a2b4046ef?narHash=sha256-n7wew722m1OTBT9DOIMxNX/NF4zfsSUABAO5eW3wikE%3D' into the Git cache... copying path '/nix/store/adcpmshidndclaz4dxjsgklrx3gqhaxp-source' from 'http://localhost:5000'... unpacking 'github:catppuccin/nix/2e605f61db52a45a7ff1db414df395ef566565a3?narHash=sha256-hmF0FVrUW6UKQ74qyGJSepMYadnIqzVe2h7TQtZdbmo%3D' into the Git cache... this derivation will be built: /nix/store/c9cq2i07h9jqjr5wb430gm5nyv24bdw0-config.tf.json.drv building '/nix/store/c9cq2i07h9jqjr5wb430gm5nyv24bdw0-config.tf.json.drv'... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing cloudflare/cloudflare v5.27.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.27.0 (unauthenticated) - Using cloudflare/cloudflare v5.27.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["matrix"]: Refreshing state... [id=c37d2e1a4edf950b4af4544574c159a8] cloudflare_dns_record.this["@"]: Refreshing state... [id=63ff3b423afd444f8bd31201db232ada] OpenTofu used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols: ~ update in-place (current -> planned) OpenTofu will perform the following actions: # cloudflare_dns_record.this["@"] will be updated in-place ! resource "cloudflare_dns_record" "this" { id = "63ff3b423afd444f8bd31201db232ada" + include_shadow_metadata = false name = "doggylabs.org" tags = [] # (12 unchanged attributes hidden) } # cloudflare_dns_record.this["matrix"] will be updated in-place ! resource "cloudflare_dns_record" "this" { id = "c37d2e1a4edf950b4af4544574c159a8" + include_shadow_metadata = false name = "matrix.doggylabs.org" tags = [] # (12 unchanged attributes hidden) } Plan: 0 to add, 2 to change, 0 to destroy. ───────────────────────────────────────────────────────────────────────────── Saved the plan to: /var/lib/atlantis/repos/ScottyLabs/infrastructure/159/matrix/matrix-matrix.tfplan To perform exactly these actions, run the following command to apply: tofu apply "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/matrix/matrix-matrix.tfplan" ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p matrix ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fmatrix%252Fmatrix) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p matrix ``` Plan: 0 to add, 2 to change, 0 to destroy. --- ### 8. project: `webhook` dir: `.` workspace: `webhook` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/0cb729ebf55dd091fac47575a867afa3c2b642db1d8bb945df61e748eabb1f63.sqlite' is busy unpacking 'github:ryantm/agenix/3daa710894355fa2fad8243380af373a2b4046ef?narHash=sha256-n7wew722m1OTBT9DOIMxNX/NF4zfsSUABAO5eW3wikE%3D' into the Git cache... copying path '/nix/store/adcpmshidndclaz4dxjsgklrx3gqhaxp-source' from 'http://localhost:5000'... unpacking 'github:catppuccin/nix/2e605f61db52a45a7ff1db414df395ef566565a3?narHash=sha256-hmF0FVrUW6UKQ74qyGJSepMYadnIqzVe2h7TQtZdbmo%3D' into the Git cache... this derivation will be built: /nix/store/69cbll0gq4913k4zs3k55rfw2wyd7dhf-config.tf.json.drv building '/nix/store/69cbll0gq4913k4zs3k55rfw2wyd7dhf-config.tf.json.drv'... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Installing cloudflare/cloudflare v5.27.0 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.27.0 (unauthenticated) - Using cloudflare/cloudflare v5.27.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["webhooks"]: Refreshing state... [id=0ec7b1a8c64ceb6e83ded9a5842a1198] OpenTofu used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols: ~ update in-place (current -> planned) OpenTofu will perform the following actions: # cloudflare_dns_record.this["webhooks"] will be updated in-place ! resource "cloudflare_dns_record" "this" { id = "0ec7b1a8c64ceb6e83ded9a5842a1198" + include_shadow_metadata = false name = "webhooks.scottylabs.org" tags = [] # (12 unchanged attributes hidden) } Plan: 0 to add, 1 to change, 0 to destroy. ───────────────────────────────────────────────────────────────────────────── Saved the plan to: /var/lib/atlantis/repos/ScottyLabs/infrastructure/159/webhook/webhook-webhook.tfplan To perform exactly these actions, run the following command to apply: tofu apply "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/webhook/webhook-webhook.tfplan" ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p webhook ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fwebhook%252Fwebhook) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p webhook ``` Plan: 0 to add, 1 to change, 0 to destroy. --- ### 9. project: `kennel` dir: `.` workspace: `kennel` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/0cb729ebf55dd091fac47575a867afa3c2b642db1d8bb945df61e748eabb1f63.sqlite' is busy unpacking 'github:feel-co/ncro/f224e3e8852cebbe1f74a2d43537e5e5eece8368?narHash=sha256-MYNywU2QeJ22mb3nd18TVrJQAPfDaI1ZGYj/QVh8mhw%3D' into the Git cache... copying path '/nix/store/hapmafc7idql333c350rhda0azc45ma4-source' from 'http://localhost:5000'... unpacking 'github:catppuccin/nix/2e605f61db52a45a7ff1db414df395ef566565a3?narHash=sha256-hmF0FVrUW6UKQ74qyGJSepMYadnIqzVe2h7TQtZdbmo%3D' into the Git cache... this derivation will be built: /nix/store/qc44qr6vicxnn30jdryvhkfg07xc3803-config.tf.json.drv building '/nix/store/qc44qr6vicxnn30jdryvhkfg07xc3803-config.tf.json.drv'... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Installing cloudflare/cloudflare v5.27.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.27.0 (unauthenticated) - Using cloudflare/cloudflare v5.27.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ vault_policy.kennel: Refreshing state... [id=kennel] vault_approle_auth_backend_role.kennel: Refreshing state... [id=auth/approle/role/kennel] data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Read complete after 0s cloudflare_dns_record.this["*"]: Refreshing state... [id=2d4b06ae1c39a5d196a27114e07c97e9] cloudflare_dns_record.this["kennel"]: Refreshing state... [id=a34066db99519085f24a01cebcb25d69] cloudflare_dns_record.this["s3.kennel"]: Refreshing state... [id=d3acfc0e5ca45e0704c40d9e3fa2e60f] OpenTofu used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols: ~ update in-place (current -> planned) OpenTofu will perform the following actions: # cloudflare_dns_record.this["*"] will be updated in-place ! resource "cloudflare_dns_record" "this" { id = "2d4b06ae1c39a5d196a27114e07c97e9" + include_shadow_metadata = false name = "*.scottylabs.net" tags = [] # (12 unchanged attributes hidden) } # cloudflare_dns_record.this["kennel"] will be updated in-place ! resource "cloudflare_dns_record" "this" { id = "a34066db99519085f24a01cebcb25d69" + include_shadow_metadata = false name = "kennel.scottylabs.org" tags = [] # (12 unchanged attributes hidden) } # cloudflare_dns_record.this["s3.kennel"] will be updated in-place ! resource "cloudflare_dns_record" "this" { id = "d3acfc0e5ca45e0704c40d9e3fa2e60f" + include_shadow_metadata = false name = "s3.kennel.scottylabs.org" tags = [] # (12 unchanged attributes hidden) } Plan: 0 to add, 3 to change, 0 to destroy. ───────────────────────────────────────────────────────────────────────────── Saved the plan to: /var/lib/atlantis/repos/ScottyLabs/infrastructure/159/kennel/kennel-kennel.tfplan To perform exactly these actions, run the following command to apply: tofu apply "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/kennel/kennel-kennel.tfplan" ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p kennel ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fkennel%252Fkennel) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p kennel ``` Plan: 0 to add, 3 to change, 0 to destroy. --- ### 10. project: `observability` dir: `.` workspace: `observability` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it copying path '/nix/store/900imzbxbcbp9ajbw96k9q6a65v7wi99-source' from 'http://localhost:5000'... unpacking 'github:feel-co/ncro/f224e3e8852cebbe1f74a2d43537e5e5eece8368?narHash=sha256-MYNywU2QeJ22mb3nd18TVrJQAPfDaI1ZGYj/QVh8mhw%3D' into the Git cache... copying path '/nix/store/hapmafc7idql333c350rhda0azc45ma4-source' from 'http://localhost:5000'... unpacking 'github:ryantm/agenix/3daa710894355fa2fad8243380af373a2b4046ef?narHash=sha256-n7wew722m1OTBT9DOIMxNX/NF4zfsSUABAO5eW3wikE%3D' into the Git cache... copying path '/nix/store/adcpmshidndclaz4dxjsgklrx3gqhaxp-source' from 'http://localhost:5000'... unpacking 'github:catppuccin/nix/2e605f61db52a45a7ff1db414df395ef566565a3?narHash=sha256-hmF0FVrUW6UKQ74qyGJSepMYadnIqzVe2h7TQtZdbmo%3D' into the Git cache... remote: Enumerating objects: 27, done. remote: Counting objects: 3% (1/27) remote: Counting objects: 7% (2/27) remote: Counting objects: 11% (3/27) remote: Counting objects: 14% (4/27) remote: Counting objects: 18% (5/27) remote: Counting objects: 22% (6/27) remote: Counting objects: 25% (7/27) remote: Counting objects: 29% (8/27) remote: Counting objects: 33% (9/27) remote: Counting objects: 37% (10/27) remote: Counting objects: 40% (11/27) remote: Counting objects: 44% (12/27) remote: Counting objects: 48% (13/27) remote: Counting objects: 51% (14/27) remote: Counting objects: 55% (15/27) remote: Counting objects: 59% (16/27) remote: Counting objects: 62% (17/27) remote: Counting objects: 66% (18/27) remote: Counting objects: 70% (19/27) remote: Counting objects: 74% (20/27) remote: Counting objects: 77% (21/27) remote: Counting objects: 81% (22/27) remote: Counting objects: 85% (23/27) remote: Counting objects: 88% (24/27) remote: Counting objects: 92% (25/27) remote: Counting objects: 96% (26/27) remote: Counting objects: 100% (27/27) remote: Counting objects: 100% (27/27), done. remote: Compressing objects: 3% (1/26) remote: Compressing objects: 7% (2/26) remote: Compressing objects: 11% (3/26) remote: Compressing objects: 15% (4/26) remote: Compressing objects: 19% (5/26) remote: Compressing objects: 23% (6/26) remote: Compressing objects: 26% (7/26) remote: Compressing objects: 30% (8/26) remote: Compressing objects: 34% (9/26) remote: Compressing objects: 38% (10/26) remote: Compressing objects: 42% (11/26) remote: Compressing objects: 46% (12/26) remote: Compressing objects: 50% (13/26) remote: Compressing objects: 53% (14/26) remote: Compressing objects: 57% (15/26) remote: Compressing objects: 61% (16/26) remote: Compressing objects: 65% (17/26) remote: Compressing objects: 69% (18/26) remote: Compressing objects: 73% (19/26) remote: Compressing objects: 76% (20/26) remote: Compressing objects: 80% (21/26) remote: Compressing objects: 84% (22/26) remote: Compressing objects: 88% (23/26) remote: Compressing objects: 92% (24/26) remote: Compressing objects: 96% (25/26) remote: Compressing objects: 100% (26/26) remote: Compressing objects: 100% (26/26), done. remote: Total 27 (delta 0), reused 21 (delta 0), pack-reused 0 (from 0) From https://codeberg.org/anish/llm-pkgs * branch d0e04df172561bf383b799d2603f1a21bc4593e5 -> FETCH_HEAD this derivation will be built: /nix/store/lfbx8493iaq1j9a9p08n6xrrqisqcnla-config.tf.json.drv building '/nix/store/lfbx8493iaq1j9a9p08n6xrrqisqcnla-config.tf.json.drv'... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Installing cloudflare/cloudflare v5.27.0 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed cloudflare/cloudflare v5.27.0 (unauthenticated) - Using cloudflare/cloudflare v5.27.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.grafana_secret_key: Refreshing state... [id=none] vault_kv_secret_v2.grafana_secret_key: Refreshing state... [id=secret/data/infra/grafana-secret-key] garage_key.loki: Refreshing state... [id=GKeed8ed294debe12a38bbd470] garage_bucket.loki_chunks: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3] garage_bucket.tempo_traces: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c] garage_key.tempo: Refreshing state... [id=GK9769dcb3b38a1ae26ac62b3c] garage_bucket_permission.loki: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3/GKeed8ed294debe12a38bbd470] vault_kv_secret_v2.loki_s3: Refreshing state... [id=secret/data/infra/loki-s3] vault_kv_secret_v2.tempo_s3: Refreshing state... [id=secret/data/infra/tempo-s3] garage_bucket_permission.tempo: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c/GK9769dcb3b38a1ae26ac62b3c] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.grafana: Refreshing state... [id=527e25bc-77c3-43d5-ac28-32aa2f21fa9c] data.cloudflare_zones.all: Reading... vault_kv_secret_v2.grafana_oidc: Refreshing state... [id=secret/data/infra/grafana-oidc] keycloak_openid_group_membership_protocol_mapper.grafana_groups: Refreshing state... [id=5c54e939-7a03-4857-93f5-437ca25e206e] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["grafana"]: Refreshing state... [id=9924f9e66892a5aeafe09ed0128a65a0] cloudflare_dns_record.this["uptime"]: Refreshing state... [id=0909f2bd8ade5d54a53b58a2a3fef540] OpenTofu used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols: ~ update in-place (current -> planned) OpenTofu will perform the following actions: # cloudflare_dns_record.this["grafana"] will be updated in-place ! resource "cloudflare_dns_record" "this" { id = "9924f9e66892a5aeafe09ed0128a65a0" + include_shadow_metadata = false name = "grafana.scottylabs.org" tags = [] # (12 unchanged attributes hidden) } # cloudflare_dns_record.this["uptime"] will be updated in-place ! resource "cloudflare_dns_record" "this" { id = "0909f2bd8ade5d54a53b58a2a3fef540" + include_shadow_metadata = false name = "uptime.scottylabs.org" tags = [] # (12 unchanged attributes hidden) } Plan: 0 to add, 2 to change, 0 to destroy. ───────────────────────────────────────────────────────────────────────────── Saved the plan to: /var/lib/atlantis/repos/ScottyLabs/infrastructure/159/observability/observability-observability.tfplan To perform exactly these actions, run the following command to apply: tofu apply "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/observability/observability-observability.tfplan" ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p observability ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fobservability%252Fobservability) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p observability ``` Plan: 0 to add, 2 to change, 0 to destroy. --- ### 11. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/0cb729ebf55dd091fac47575a867afa3c2b642db1d8bb945df61e748eabb1f63.sqlite' is busy unpacking 'github:feel-co/ncro/f224e3e8852cebbe1f74a2d43537e5e5eece8368?narHash=sha256-MYNywU2QeJ22mb3nd18TVrJQAPfDaI1ZGYj/QVh8mhw%3D' into the Git cache... copying path '/nix/store/hapmafc7idql333c350rhda0azc45ma4-source' from 'http://localhost:5000'... unpacking 'github:ryantm/agenix/3daa710894355fa2fad8243380af373a2b4046ef?narHash=sha256-n7wew722m1OTBT9DOIMxNX/NF4zfsSUABAO5eW3wikE%3D' into the Git cache... copying path '/nix/store/adcpmshidndclaz4dxjsgklrx3gqhaxp-source' from 'http://localhost:5000'... unpacking 'github:catppuccin/nix/2e605f61db52a45a7ff1db414df395ef566565a3?narHash=sha256-hmF0FVrUW6UKQ74qyGJSepMYadnIqzVe2h7TQtZdbmo%3D' into the Git cache... this derivation will be built: /nix/store/806rhb94wxsh5nvg77b6gznrksld468z-config.tf.json.drv building '/nix/store/806rhb94wxsh5nvg77b6gznrksld468z-config.tf.json.drv'... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing cloudflare/cloudflare v5.27.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.27.0 (unauthenticated) - Using cloudflare/cloudflare v5.27.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.garage_webadmin_jwt: Refreshing state... [id=none] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.garage_webadmin: Refreshing state... [id=a48c9f66-cde3-463d-970c-b2d7de716185] data.cloudflare_zones.all: Reading... keycloak_openid_group_membership_protocol_mapper.garage_webadmin_groups: Refreshing state... [id=a86e928b-6c7a-4081-a291-637e752fbabf] vault_kv_secret_v2.garage_webadmin_oidc: Refreshing state... [id=secret/data/infra/garage-webadmin-oidc] vault_kv_secret_v2.garage_webadmin_jwt: Refreshing state... [id=secret/data/infra/garage-webadmin-jwt] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["garage"]: Refreshing state... [id=4054146ceff1515773704f89136b25f1] OpenTofu used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols: ~ update in-place (current -> planned) OpenTofu will perform the following actions: # cloudflare_dns_record.this["garage"] will be updated in-place ! resource "cloudflare_dns_record" "this" { id = "4054146ceff1515773704f89136b25f1" + include_shadow_metadata = false name = "garage.scottylabs.org" tags = [] # (12 unchanged attributes hidden) } Plan: 0 to add, 1 to change, 0 to destroy. ───────────────────────────────────────────────────────────────────────────── Saved the plan to: /var/lib/atlantis/repos/ScottyLabs/infrastructure/159/garage-webadmin/garage-webadmin-garage-webadmin.tfplan To perform exactly these actions, run the following command to apply: tofu apply "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/garage-webadmin/garage-webadmin-garage-webadmin.tfplan" ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p garage-webadmin ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fgarage-webadmin%252Fgarage-webadmin) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p garage-webadmin ``` Plan: 0 to add, 1 to change, 0 to destroy. --- ### 12. project: `keycloak` dir: `.` workspace: `keycloak` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/0cb729ebf55dd091fac47575a867afa3c2b642db1d8bb945df61e748eabb1f63.sqlite' is busy copying path '/nix/store/900imzbxbcbp9ajbw96k9q6a65v7wi99-source' from 'http://localhost:5000'... unpacking 'github:feel-co/ncro/f224e3e8852cebbe1f74a2d43537e5e5eece8368?narHash=sha256-MYNywU2QeJ22mb3nd18TVrJQAPfDaI1ZGYj/QVh8mhw%3D' into the Git cache... copying path '/nix/store/hapmafc7idql333c350rhda0azc45ma4-source' from 'http://localhost:5000'... unpacking 'github:ryantm/agenix/3daa710894355fa2fad8243380af373a2b4046ef?narHash=sha256-n7wew722m1OTBT9DOIMxNX/NF4zfsSUABAO5eW3wikE%3D' into the Git cache... copying path '/nix/store/adcpmshidndclaz4dxjsgklrx3gqhaxp-source' from 'http://localhost:5000'... unpacking 'github:catppuccin/nix/2e605f61db52a45a7ff1db414df395ef566565a3?narHash=sha256-hmF0FVrUW6UKQ74qyGJSepMYadnIqzVe2h7TQtZdbmo%3D' into the Git cache... this derivation will be built: /nix/store/lsmks8vh0hvkfvhhx1qpd3qba8prd9hm-config.tf.json.drv building '/nix/store/lsmks8vh0hvkfvhhx1qpd3qba8prd9hm-config.tf.json.drv'... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding hashicorp/random versions matching "~> 3.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding keycloak/keycloak versions matching "~> 5.0"... - Installing cloudflare/cloudflare v5.27.0 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.27.0 (unauthenticated) - Using cloudflare/cloudflare v5.27.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.vault_kv_secret_v2.forgejo_idp: Reading... data.vault_kv_secret_v2.keycloak_idp: Reading... data.vault_kv_secret_v2.keycloak_ldap: Reading... data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp] data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp] data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_saml_identity_provider.cmu_saml: Refreshing state... [id=cmu-saml] keycloak_oidc_identity_provider.cmu: Refreshing state... [id=cmu] keycloak_ldap_user_federation.cmu: Refreshing state... [id=TtPPdhQJRUSFFwr_nJ2gcA] keycloak_oidc_google_identity_provider.google: Refreshing state... [id=google] keycloak_oidc_identity_provider.cmu_git: Refreshing state... [id=cmu-dev] keycloak_oidc_identity_provider.slack: Refreshing state... [id=slack] keycloak_realm_user_profile.scottylabs: Refreshing state... [id=scottylabs] keycloak_custom_identity_provider_mapper.cmu_saml_username: Refreshing state... [id=32fed5ec-b30e-4b69-90a3-64c58f592ded] keycloak_custom_identity_provider_mapper.cmu_username: Refreshing state... [id=65d1857d-19e5-4db5-940c-7751b770b4ac] keycloak_custom_identity_provider_mapper.cmudev_email: Refreshing state... [id=2763e7d7-f102-479e-a560-41704bcf5e4b] keycloak_custom_identity_provider_mapper.cmudev_id: Refreshing state... [id=5944bfd3-9704-482e-ac25-c41a40351cd7] keycloak_custom_identity_provider_mapper.cmudev_username: Refreshing state... [id=8f04fb48-8434-43d6-accd-5b3a1e48e9b2] keycloak_custom_identity_provider_mapper.cmudev_name: Refreshing state... [id=17703dd7-f88f-4d6b-88f0-e7561e796c8f] keycloak_custom_identity_provider_mapper.google_email: Refreshing state... [id=ab2117f2-dcbf-4409-a7b7-c7354317e6cc] keycloak_custom_identity_provider_mapper.google_id: Refreshing state... [id=eda09ecd-d9ce-4ab0-a585-8f7d45dff7de] keycloak_custom_identity_provider_mapper.google_name: Refreshing state... [id=9d5c678f-df91-493d-a575-be1ce56a34e0] keycloak_custom_identity_provider_mapper.slack_id: Refreshing state... [id=7d6f3768-e0a7-41c2-b252-95d2709c65b7] data.cloudflare_zones.all: Read complete after 0s keycloak_custom_identity_provider_mapper.slack_email: Refreshing state... [id=ea769c6c-b497-49ec-9a4d-8ba28005e62d] keycloak_custom_identity_provider_mapper.slack_name: Refreshing state... [id=2e4d5410-12d5-46b3-b3d4-7f5b17ee0556] keycloak_ldap_user_attribute_mapper.cmu_ldap_orcid: Refreshing state... [id=66b0d533-9f67-4b17-8bce-d056c3196377] keycloak_ldap_user_attribute_mapper.cmu_ldap_class: Refreshing state... [id=2f7671ad-081b-497a-b868-e48ba2e1d651] keycloak_ldap_user_attribute_mapper.cmu_ldap_full_email: Refreshing state... [id=267b1bc1-9714-46d5-85c0-e3b9a120b4da] keycloak_ldap_user_attribute_mapper.cmu_ldap_full_name: Refreshing state... [id=3246c4a5-14c9-444d-ba7d-ab2fa110c38d] keycloak_ldap_user_attribute_mapper.cmu_ldap_primary_affiliation: Refreshing state... [id=68cb7c40-51a4-4b5f-b520-617ae560163b] keycloak_ldap_user_attribute_mapper.cmu_ldap_display_name: Refreshing state... [id=ffc86fab-f094-4d62-83a8-9aeffb3b6784] keycloak_ldap_user_attribute_mapper.cmu_ldap_first_name: Refreshing state... [id=5545f837-8bb1-4435-8797-a780dfd3c290] keycloak_ldap_user_attribute_mapper.cmu_ldap_status: Refreshing state... [id=c4907832-a07a-4c5c-9a36-852b13f90cf6] keycloak_ldap_msad_user_account_control_mapper.cmu_ldap_msad: Refreshing state... [id=59e25378-3850-47d9-bfa3-18aec5d2bef3] keycloak_ldap_user_attribute_mapper.cmu_ldap_email: Refreshing state... [id=409b11eb-37ae-4943-9983-7613b0bf392f] keycloak_ldap_user_attribute_mapper.cmu_ldap_colleges: Refreshing state... [id=0ad2e74c-edb9-48c8-a7c7-3958d49ca802] keycloak_ldap_user_attribute_mapper.cmu_ldap_modify_date: Refreshing state... [id=5618310c-00e4-4bec-9e04-3975357268ae] keycloak_ldap_user_attribute_mapper.cmu_ldap_departments: Refreshing state... [id=da295d4b-3ee1-41b2-a9cb-4364c308c4fc] keycloak_ldap_user_attribute_mapper.cmu_ldap_middle_name: Refreshing state... [id=73050ab4-9a3a-43cd-be03-6eaf2c891113] keycloak_ldap_user_attribute_mapper.cmu_ldap_username: Refreshing state... [id=4277dde1-b06e-42ff-acf8-5537604cb505] keycloak_ldap_user_attribute_mapper.cmu_ldap_last_name: Refreshing state... [id=1bdeb17a-f3b5-4d20-9405-f18950582ec9] keycloak_ldap_user_attribute_mapper.cmu_ldap_affiliations: Refreshing state... [id=d5051889-ed12-4307-ae20-6cb808f988d1] keycloak_ldap_user_attribute_mapper.cmu_ldap_creation_date: Refreshing state... [id=e271c3e5-024c-441d-8662-00aff6f95f60] keycloak_ldap_custom_mapper.cmu_ldap_kerberos_principal: Refreshing state... [id=5f10a23b-84b2-4441-ac93-8042dd701e29] keycloak_ldap_user_attribute_mapper.cmu_ldap_level: Refreshing state... [id=981dc6b9-9957-48d2-94f4-c9e8182af115] cloudflare_dns_record.this["idp"]: Refreshing state... [id=76512b10636c34a8230d5618d365d6bc] OpenTofu used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols: ~ update in-place (current -> planned) OpenTofu will perform the following actions: # cloudflare_dns_record.this["idp"] will be updated in-place ! resource "cloudflare_dns_record" "this" { id = "76512b10636c34a8230d5618d365d6bc" + include_shadow_metadata = false name = "idp.scottylabs.org" tags = [] # (12 unchanged attributes hidden) } Plan: 0 to add, 1 to change, 0 to destroy. ╷ │ Warning: Deprecated Resource │ │ with data.vault_kv_secret_v2.forgejo_idp, │ on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp: │ 15: }, │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead │ │ (and 5 more similar warnings elsewhere) ╵ ╷ │ Warning: Value derived from a deprecated source │ │ with keycloak_ldap_user_federation.cmu, │ on config.tf.json line 423, in resource.keycloak_ldap_user_federation.cmu: │ 423: "vendor": "AD" │ │ This value is derived from data.vault_kv_secret_v2.keycloak_ldap, which is │ deprecated with the following message: │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead ╵ ╷ │ Warning: Value derived from a deprecated source │ │ with keycloak_oidc_google_identity_provider.google, │ on config.tf.json line 437, in resource.keycloak_oidc_google_identity_provider.google: │ 437: } │ │ This value is derived from data.vault_kv_secret_v2.keycloak_idp, which is │ deprecated with the following message: │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead ╵ ╷ │ Warning: Value derived from a deprecated source │ │ with keycloak_oidc_identity_provider.cmu_git, │ on config.tf.json line 490, in resource.keycloak_oidc_identity_provider.cmu_git: │ 490: "validate_signature": true │ │ This value is derived from data.vault_kv_secret_v2.forgejo_idp, which is │ deprecated with the following message: │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead ╵ ───────────────────────────────────────────────────────────────────────────── Saved the plan to: /var/lib/atlantis/repos/ScottyLabs/infrastructure/159/keycloak/keycloak-keycloak.tfplan To perform exactly these actions, run the following command to apply: tofu apply "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/keycloak/keycloak-keycloak.tfplan" ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p keycloak ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fkeycloak%252Fkeycloak) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p keycloak ``` Plan: 0 to add, 1 to change, 0 to destroy. --- ### 13. project: `vaultwarden` dir: `.` workspace: `vaultwarden` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/0cb729ebf55dd091fac47575a867afa3c2b642db1d8bb945df61e748eabb1f63.sqlite' is busy copying path '/nix/store/hapmafc7idql333c350rhda0azc45ma4-source' from 'http://localhost:5000'... unpacking 'github:ryantm/agenix/3daa710894355fa2fad8243380af373a2b4046ef?narHash=sha256-n7wew722m1OTBT9DOIMxNX/NF4zfsSUABAO5eW3wikE%3D' into the Git cache... copying path '/nix/store/adcpmshidndclaz4dxjsgklrx3gqhaxp-source' from 'http://localhost:5000'... unpacking 'github:catppuccin/nix/2e605f61db52a45a7ff1db414df395ef566565a3?narHash=sha256-hmF0FVrUW6UKQ74qyGJSepMYadnIqzVe2h7TQtZdbmo%3D' into the Git cache... this derivation will be built: /nix/store/mgh15yw442kji4d9hbb1bg9mppfym685-config.tf.json.drv building '/nix/store/mgh15yw442kji4d9hbb1bg9mppfym685-config.tf.json.drv'... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing cloudflare/cloudflare v5.27.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.27.0 (unauthenticated) - Using cloudflare/cloudflare v5.27.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Reading... data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["vault"]: Refreshing state... [id=7828e0eeb9e7f251c797f565828a47f6] OpenTofu used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols: ~ update in-place (current -> planned) OpenTofu will perform the following actions: # cloudflare_dns_record.this["vault"] will be updated in-place ! resource "cloudflare_dns_record" "this" { id = "7828e0eeb9e7f251c797f565828a47f6" + include_shadow_metadata = false name = "vault.scottylabs.org" tags = [] # (12 unchanged attributes hidden) } Plan: 0 to add, 1 to change, 0 to destroy. ───────────────────────────────────────────────────────────────────────────── Saved the plan to: /var/lib/atlantis/repos/ScottyLabs/infrastructure/159/vaultwarden/vaultwarden-vaultwarden.tfplan To perform exactly these actions, run the following command to apply: tofu apply "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/vaultwarden/vaultwarden-vaultwarden.tfplan" ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p vaultwarden ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fvaultwarden%252Fvaultwarden) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p vaultwarden ``` Plan: 0 to add, 1 to change, 0 to destroy. --- ### 14. project: `headscale` dir: `.` workspace: `headscale` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/0cb729ebf55dd091fac47575a867afa3c2b642db1d8bb945df61e748eabb1f63.sqlite' is busy copying path '/nix/store/900imzbxbcbp9ajbw96k9q6a65v7wi99-source' from 'http://localhost:5000'... unpacking 'github:feel-co/ncro/f224e3e8852cebbe1f74a2d43537e5e5eece8368?narHash=sha256-MYNywU2QeJ22mb3nd18TVrJQAPfDaI1ZGYj/QVh8mhw%3D' into the Git cache... copying path '/nix/store/hapmafc7idql333c350rhda0azc45ma4-source' from 'http://localhost:5000'... unpacking 'github:ryantm/agenix/3daa710894355fa2fad8243380af373a2b4046ef?narHash=sha256-n7wew722m1OTBT9DOIMxNX/NF4zfsSUABAO5eW3wikE%3D' into the Git cache... copying path '/nix/store/adcpmshidndclaz4dxjsgklrx3gqhaxp-source' from 'http://localhost:5000'... unpacking 'github:catppuccin/nix/2e605f61db52a45a7ff1db414df395ef566565a3?narHash=sha256-hmF0FVrUW6UKQ74qyGJSepMYadnIqzVe2h7TQtZdbmo%3D' into the Git cache... this derivation will be built: /nix/store/rva6sv9wfbgpkwbxmwq6cyz1882g1qlz-config.tf.json.drv building '/nix/store/rva6sv9wfbgpkwbxmwq6cyz1882g1qlz-config.tf.json.drv'... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing cloudflare/cloudflare v5.27.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.27.0 (unauthenticated) - Using cloudflare/cloudflare v5.27.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.headplane_cookie: Refreshing state... [id=none] vault_kv_secret_v2.headplane_cookie: Refreshing state... [id=secret/data/infra/headplane-cookie] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.headplane: Refreshing state... [id=40d2dbf9-409b-4edc-974c-85d5e939efac] data.cloudflare_zones.all: Reading... keycloak_openid_client.headscale: Refreshing state... [id=f2875c14-dfff-4fd4-b60b-4d1e066aaeb8] keycloak_openid_group_membership_protocol_mapper.headplane_groups: Refreshing state... [id=fd683ca7-ed77-44f1-b3cc-47241ccb6fb7] vault_kv_secret_v2.headplane_oidc: Refreshing state... [id=secret/data/infra/headplane-oidc] vault_kv_secret_v2.headscale_oidc: Refreshing state... [id=secret/data/infra/headscale-oidc] keycloak_openid_group_membership_protocol_mapper.headscale_groups: Refreshing state... [id=f091397a-9b6e-4887-9913-12fb542d7210] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["headplane"]: Refreshing state... [id=9139cfa1f058db85d837defe0460fd20] cloudflare_dns_record.this["headscale"]: Refreshing state... [id=4207dabef0c8dc1972f9d5aa1cd17a00] OpenTofu used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols: ~ update in-place (current -> planned) OpenTofu will perform the following actions: # cloudflare_dns_record.this["headplane"] will be updated in-place ! resource "cloudflare_dns_record" "this" { id = "9139cfa1f058db85d837defe0460fd20" + include_shadow_metadata = false name = "headplane.scottylabs.org" tags = [] # (12 unchanged attributes hidden) } # cloudflare_dns_record.this["headscale"] will be updated in-place ! resource "cloudflare_dns_record" "this" { id = "4207dabef0c8dc1972f9d5aa1cd17a00" + include_shadow_metadata = false name = "headscale.scottylabs.org" tags = [] # (12 unchanged attributes hidden) } Plan: 0 to add, 2 to change, 0 to destroy. ───────────────────────────────────────────────────────────────────────────── Saved the plan to: /var/lib/atlantis/repos/ScottyLabs/infrastructure/159/headscale/headscale-headscale.tfplan To perform exactly these actions, run the following command to apply: tofu apply "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/headscale/headscale-headscale.tfplan" ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p headscale ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fheadscale%252Fheadscale) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p headscale ``` Plan: 0 to add, 2 to change, 0 to destroy. --- ### 15. project: `hosts` dir: `.` workspace: `hosts` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/0cb729ebf55dd091fac47575a867afa3c2b642db1d8bb945df61e748eabb1f63.sqlite' is busy copying path '/nix/store/900imzbxbcbp9ajbw96k9q6a65v7wi99-source' from 'http://localhost:5000'... unpacking 'github:feel-co/ncro/f224e3e8852cebbe1f74a2d43537e5e5eece8368?narHash=sha256-MYNywU2QeJ22mb3nd18TVrJQAPfDaI1ZGYj/QVh8mhw%3D' into the Git cache... copying path '/nix/store/hapmafc7idql333c350rhda0azc45ma4-source' from 'http://localhost:5000'... unpacking 'github:ryantm/agenix/3daa710894355fa2fad8243380af373a2b4046ef?narHash=sha256-n7wew722m1OTBT9DOIMxNX/NF4zfsSUABAO5eW3wikE%3D' into the Git cache... copying path '/nix/store/adcpmshidndclaz4dxjsgklrx3gqhaxp-source' from 'http://localhost:5000'... unpacking 'github:catppuccin/nix/2e605f61db52a45a7ff1db414df395ef566565a3?narHash=sha256-hmF0FVrUW6UKQ74qyGJSepMYadnIqzVe2h7TQtZdbmo%3D' into the Git cache... copying path '/nix/store/8ggr67sci43hlp8ba6rhjrdhhj5490am-source' from 'http://localhost:5000'... this derivation will be built: /nix/store/fmwxyhk7c8fzxca8cp48s467y2w9qaz1-config.tf.json.drv building '/nix/store/fmwxyhk7c8fzxca8cp48s467y2w9qaz1-config.tf.json.drv'... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Installing cloudflare/cloudflare v5.27.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.27.0 (unauthenticated) - Using cloudflare/cloudflare v5.27.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Reading... data.cloudflare_zones.all: Read complete after 1s cloudflare_zone_setting.always_use_https["78a8413b3e73553f7def8cefe1bdc386"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["97416783adc55489c6f601bbfaa48936"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["a3c2419a7e47cdc909022c5815310013"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["9746fc8415923e40c5961ad58708e7f6"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["dfe11e930ca4ef3d94cd9f79072315cd"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["4585d8c6e8c50f8e8450c220783d6cc3"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["a0686a6fe9f1e181d0c1dcdf9c293a9b"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["03d47c74036171bb4a0ad2679adf7ca5"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["acfb686acc0532474d7f379317afb648"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["c304ee4431d1d2c0313343aff8ffc338"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["ab365d7cec88f972e0b26bf59afd174f"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["c46bbc75077117690939c20f203a3c00"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["eacdf87531ae2114049a9585ab73ef9d"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["50f297e4046f66a46bcb445f9b92f2c3"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["55c7eec3f2a44b6b943962682d1d1953"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["2bf8696c7e2fdc56f9b9e98443f001cc"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["3b8197fed31cd2c5f52b2bbbe8b1fa0f"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["261d3e0e93bb02ae1e6f31c7b09c6441"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["6a38c25604c09abe30baff7e2176a673"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["5ec9401ebede43c78ad0167fefd3b862"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["9ae67b02fb7f5a546a8fd18527115ea5"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["90331dc9edd007e59c828faa3b8d73a9"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["b485862979e222b68b5980cc50e8c63b"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["dbedf6cff671263c0d6f69b482895ee4"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["98d2138c49ff1067e6fc6146febadcca"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["5c2e7faf46bf72319da6cdffadca7f43"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["706d92947e0941effeffd392637f97a2"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["2d4a1424a61322658b5e478b6f563e26"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["d8546107eab7e3bf8d413759c28b66c2"]: Refreshing state... [id=always_use_https] cloudflare_dns_record.this["infra-01"]: Refreshing state... [id=30f50d5655d03d54b472480be1476c1c] cloudflare_dns_record.this["infra-02"]: Refreshing state... [id=1856c054b772a4ac62e0f53625163997] cloudflare_dns_record.this["signage-01"]: Refreshing state... [id=a80079e44697aebac2cbda4ab85a79ee] cloudflare_dns_record.this["snoopy"]: Refreshing state... [id=7f849c841bba1c0d46009308acaf7f55] cloudflare_dns_record.this["deploy-01"]: Refreshing state... [id=bcb794198cc3e1ad25e3707e3af7fd1d] OpenTofu used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols: ~ update in-place (current -> planned) OpenTofu will perform the following actions: # cloudflare_dns_record.this["deploy-01"] will be updated in-place ! resource "cloudflare_dns_record" "this" { id = "bcb794198cc3e1ad25e3707e3af7fd1d" + include_shadow_metadata = false name = "deploy-01.scottylabs.org" tags = [] # (12 unchanged attributes hidden) } # cloudflare_dns_record.this["infra-01"] will be updated in-place ! resource "cloudflare_dns_record" "this" { id = "30f50d5655d03d54b472480be1476c1c" + include_shadow_metadata = false name = "infra-01.scottylabs.org" tags = [] # (12 unchanged attributes hidden) } # cloudflare_dns_record.this["infra-02"] will be updated in-place ! resource "cloudflare_dns_record" "this" { id = "1856c054b772a4ac62e0f53625163997" + include_shadow_metadata = false name = "infra-02.scottylabs.org" tags = [] # (12 unchanged attributes hidden) } # cloudflare_dns_record.this["signage-01"] will be updated in-place ! resource "cloudflare_dns_record" "this" { id = "a80079e44697aebac2cbda4ab85a79ee" + include_shadow_metadata = false name = "signage-01.scottylabs.org" tags = [] # (12 unchanged attributes hidden) } # cloudflare_dns_record.this["snoopy"] will be updated in-place ! resource "cloudflare_dns_record" "this" { id = "7f849c841bba1c0d46009308acaf7f55" + include_shadow_metadata = false name = "snoopy.scottylabs.org" tags = [] # (12 unchanged attributes hidden) } Plan: 0 to add, 5 to change, 0 to destroy. ───────────────────────────────────────────────────────────────────────────── Saved the plan to: /var/lib/atlantis/repos/ScottyLabs/infrastructure/159/hosts/hosts-hosts.tfplan To perform exactly these actions, run the following command to apply: tofu apply "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/hosts/hosts-hosts.tfplan" ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p hosts ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fhosts%252Fhosts) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p hosts ``` Plan: 0 to add, 5 to change, 0 to destroy. --- ### 16. project: `atlantis` dir: `.` workspace: `atlantis` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/0cb729ebf55dd091fac47575a867afa3c2b642db1d8bb945df61e748eabb1f63.sqlite' is busy copying path '/nix/store/900imzbxbcbp9ajbw96k9q6a65v7wi99-source' from 'http://localhost:5000'... unpacking 'github:feel-co/ncro/f224e3e8852cebbe1f74a2d43537e5e5eece8368?narHash=sha256-MYNywU2QeJ22mb3nd18TVrJQAPfDaI1ZGYj/QVh8mhw%3D' into the Git cache... copying path '/nix/store/hapmafc7idql333c350rhda0azc45ma4-source' from 'http://localhost:5000'... unpacking 'github:ryantm/agenix/3daa710894355fa2fad8243380af373a2b4046ef?narHash=sha256-n7wew722m1OTBT9DOIMxNX/NF4zfsSUABAO5eW3wikE%3D' into the Git cache... copying path '/nix/store/adcpmshidndclaz4dxjsgklrx3gqhaxp-source' from 'http://localhost:5000'... unpacking 'github:catppuccin/nix/2e605f61db52a45a7ff1db414df395ef566565a3?narHash=sha256-hmF0FVrUW6UKQ74qyGJSepMYadnIqzVe2h7TQtZdbmo%3D' into the Git cache... this derivation will be built: /nix/store/w1hcdipws1ax6kin183dx7a4wviwg2qv-config.tf.json.drv building '/nix/store/w1hcdipws1ax6kin183dx7a4wviwg2qv-config.tf.json.drv'... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding svalabs/forgejo versions matching "~> 1.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Installing cloudflare/cloudflare v5.27.0 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installing svalabs/forgejo v1.6.1 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed svalabs/forgejo v1.6.1 (unauthenticated) - Using svalabs/forgejo v1.6.1 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.27.0 (unauthenticated) - Using cloudflare/cloudflare v5.27.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ - svalabs/forgejo │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.atlantis_webhook_secret: Refreshing state... [id=none] vault_kv_secret_v2.atlantis_webhook: Refreshing state... [id=secret/data/infra/atlantis] data.forgejo_repository.governance: Reading... data.forgejo_repository.infrastructure: Reading... data.forgejo_repository.governance: Read complete after 0s [name=governance] forgejo_repository_webhook.governance: Refreshing state... data.forgejo_repository.infrastructure: Read complete after 0s [name=infrastructure] forgejo_repository_webhook.infrastructure: Refreshing state... data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["atlantis"]: Refreshing state... [id=d0419d10a0c0bb715bcbadc7a1c73cbb] OpenTofu used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols: ~ update in-place (current -> planned) OpenTofu will perform the following actions: # cloudflare_dns_record.this["atlantis"] will be updated in-place ! resource "cloudflare_dns_record" "this" { id = "d0419d10a0c0bb715bcbadc7a1c73cbb" + include_shadow_metadata = false name = "atlantis.scottylabs.org" tags = [] # (12 unchanged attributes hidden) } Plan: 0 to add, 1 to change, 0 to destroy. ───────────────────────────────────────────────────────────────────────────── Saved the plan to: /var/lib/atlantis/repos/ScottyLabs/infrastructure/159/atlantis/atlantis-atlantis.tfplan To perform exactly these actions, run the following command to apply: tofu apply "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/atlantis/atlantis-atlantis.tfplan" ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p atlantis ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fatlantis%252Fatlantis) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p atlantis ``` Plan: 0 to add, 1 to change, 0 to destroy. --- ### 17. project: `openbao` dir: `.` workspace: `openbao` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/0cb729ebf55dd091fac47575a867afa3c2b642db1d8bb945df61e748eabb1f63.sqlite' is busy copying path '/nix/store/900imzbxbcbp9ajbw96k9q6a65v7wi99-source' from 'http://localhost:5000'... unpacking 'github:feel-co/ncro/f224e3e8852cebbe1f74a2d43537e5e5eece8368?narHash=sha256-MYNywU2QeJ22mb3nd18TVrJQAPfDaI1ZGYj/QVh8mhw%3D' into the Git cache... copying path '/nix/store/hapmafc7idql333c350rhda0azc45ma4-source' from 'http://localhost:5000'... unpacking 'github:ryantm/agenix/3daa710894355fa2fad8243380af373a2b4046ef?narHash=sha256-n7wew722m1OTBT9DOIMxNX/NF4zfsSUABAO5eW3wikE%3D' into the Git cache... copying path '/nix/store/adcpmshidndclaz4dxjsgklrx3gqhaxp-source' from 'http://localhost:5000'... unpacking 'github:catppuccin/nix/2e605f61db52a45a7ff1db414df395ef566565a3?narHash=sha256-hmF0FVrUW6UKQ74qyGJSepMYadnIqzVe2h7TQtZdbmo%3D' into the Git cache... this derivation will be built: /nix/store/n0nixw625rwyyssl713dlb8i6fx3k9mq-config.tf.json.drv building '/nix/store/n0nixw625rwyyssl713dlb8i6fx3k9mq-config.tf.json.drv'... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Installing cloudflare/cloudflare v5.27.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.27.0 (unauthenticated) - Using cloudflare/cloudflare v5.27.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ vault_policy.ci: Refreshing state... [id=ci] vault_policy.infra: Refreshing state... [id=infra] vault_mount.kv: Refreshing state... [id=secret] vault_jwt_auth_backend.forgejo: Refreshing state... [id=jwt] vault_auth_backend.approle: Refreshing state... [id=approle] vault_policy.devops: Refreshing state... [id=devops] vault_policy.shared_read: Refreshing state... [id=shared-read] vault_identity_group.all_members: Refreshing state... [id=17a94032-1dfa-8c66-af1f-ac3942f8d13f] vault_approle_auth_backend_role.host["infra-01"]: Refreshing state... [id=auth/approle/role/infra-01] vault_approle_auth_backend_role.host["snoopy"]: Refreshing state... [id=auth/approle/role/snoopy] vault_approle_auth_backend_role.host["signage-01"]: Refreshing state... [id=auth/approle/role/signage-01] vault_identity_group.devops: Refreshing state... [id=6922ccb6-70c2-acef-0580-49477441e3ff] vault_kv_secret_v2.cachix: Refreshing state... [id=secret/data/shared/cachix] vault_approle_auth_backend_role.host["deploy-01"]: Refreshing state... [id=auth/approle/role/deploy-01] vault_jwt_auth_backend_role.ci: Refreshing state... [id=auth/jwt/role/ci] data.keycloak_realm.scottylabs: Reading... data.cloudflare_zones.all: Reading... data.cloudflare_zones.all: Read complete after 0s cloudflare_dns_record.this["secrets"]: Refreshing state... [id=c24ad8899e7a3b573f1d2d7b95711926] data.keycloak_realm.scottylabs: Read complete after 5s [id=scottylabs] keycloak_openid_client.openbao: Refreshing state... [id=86926066-77c5-458e-be5a-cb585b75c818] keycloak_openid_group_membership_protocol_mapper.openbao_groups: Refreshing state... [id=cafd878e-dbc6-4376-95de-f09c2e5b9870] vault_jwt_auth_backend.oidc: Refreshing state... [id=oidc] vault_identity_group_alias.all_members: Refreshing state... [id=3371c9f2-3d4b-eafe-20e5-f2bfed63fdb9] vault_identity_group_alias.devops: Refreshing state... [id=f7f8c2b9-125e-5c92-efda-361e93cd2d2a] vault_jwt_auth_backend_role.default: Refreshing state... [id=auth/oidc/role/default] OpenTofu used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols: ~ update in-place (current -> planned) OpenTofu will perform the following actions: # cloudflare_dns_record.this["secrets"] will be updated in-place ! resource "cloudflare_dns_record" "this" { id = "c24ad8899e7a3b573f1d2d7b95711926" + include_shadow_metadata = false name = "secrets.scottylabs.org" tags = [] # (12 unchanged attributes hidden) } Plan: 0 to add, 1 to change, 0 to destroy. ───────────────────────────────────────────────────────────────────────────── Saved the plan to: /var/lib/atlantis/repos/ScottyLabs/infrastructure/159/openbao/openbao-openbao.tfplan To perform exactly these actions, run the following command to apply: tofu apply "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/openbao/openbao-openbao.tfplan" ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p openbao ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fopenbao%252Fopenbao) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p openbao ``` Plan: 0 to add, 1 to change, 0 to destroy. --- ### Plan Summary 17 projects, 14 with changes, 1 with no changes, 2 failed * :fast_forward: To **apply** all unapplied plans from this Pull Request, comment: ```shell atlantis apply ``` * :put_litter_in_its_place: To **delete** all plans and locks from this Pull Request, comment: ```shell atlantis unlock ```

anish commented 2026-10-13 05:42:23 +00:00

Author

Owner

Copy link

atlantis plan -p ricochet

atlantis plan -p ricochet

scottylabs-bot commented 2026-10-13 05:42:31 +00:00

Owner

Copy link

Ran Plan for project: ricochet dir: . workspace: ricochet

Show Output

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
this derivation will be built:
  /nix/store/667a93d8nkmzpld9177zm8m1r7wh4vgm-config.tf.json.drv
building '/nix/store/667a93d8nkmzpld9177zm8m1r7wh4vgm-config.tf.json.drv'...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing cloudflare/cloudflare v5.27.0 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.27.0 (unauthenticated)
- Using cloudflare/cloudflare v5.27.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.keycloak_realm.scottylabs: Reading...
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["oauth"]: Refreshing state... [id=346fac8950e4873a27d5cfb72104783d]

OpenTofu used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place (current -> planned)

OpenTofu will perform the following actions:

  # cloudflare_dns_record.this["oauth"] will be updated in-place
!   resource "cloudflare_dns_record" "this" {
        id                      = "346fac8950e4873a27d5cfb72104783d"
+       include_shadow_metadata = false
        name                    = "oauth.scottylabs.org"
        tags                    = []
        # (12 unchanged attributes hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

─────────────────────────────────────────────────────────────────────────────

Saved the plan to:
/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/ricochet/ricochet-ricochet.tfplan

To perform exactly these actions, run the following command to apply:
    tofu apply "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/ricochet/ricochet-ricochet.tfplan"

• ▶️ To apply this plan, comment:

  atlantis apply -p ricochet
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p ricochet
  

Plan: 0 to add, 1 to change, 0 to destroy.

---

• ⏩ To apply all unapplied plans from this Pull Request, comment:

  atlantis apply
  

• 🚮 To delete all plans and locks from this Pull Request, comment:

  atlantis unlock
  

Ran Plan for project: `ricochet` dir: `.` workspace: `ricochet` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it this derivation will be built: /nix/store/667a93d8nkmzpld9177zm8m1r7wh4vgm-config.tf.json.drv building '/nix/store/667a93d8nkmzpld9177zm8m1r7wh4vgm-config.tf.json.drv'... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing cloudflare/cloudflare v5.27.0 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.27.0 (unauthenticated) - Using cloudflare/cloudflare v5.27.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.keycloak_realm.scottylabs: Reading... data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["oauth"]: Refreshing state... [id=346fac8950e4873a27d5cfb72104783d] OpenTofu used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols: ~ update in-place (current -> planned) OpenTofu will perform the following actions: # cloudflare_dns_record.this["oauth"] will be updated in-place ! resource "cloudflare_dns_record" "this" { id = "346fac8950e4873a27d5cfb72104783d" + include_shadow_metadata = false name = "oauth.scottylabs.org" tags = [] # (12 unchanged attributes hidden) } Plan: 0 to add, 1 to change, 0 to destroy. ───────────────────────────────────────────────────────────────────────────── Saved the plan to: /var/lib/atlantis/repos/ScottyLabs/infrastructure/159/ricochet/ricochet-ricochet.tfplan To perform exactly these actions, run the following command to apply: tofu apply "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/ricochet/ricochet-ricochet.tfplan" ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p ricochet ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fricochet%252Fricochet) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p ricochet ``` Plan: 0 to add, 1 to change, 0 to destroy. --- * :fast_forward: To **apply** all unapplied plans from this Pull Request, comment: ```shell atlantis apply ``` * :put_litter_in_its_place: To **delete** all plans and locks from this Pull Request, comment: ```shell atlantis unlock ```

anish commented 2026-10-13 05:43:22 +00:00

Author

Owner

Copy link

atlantis plan -p litellm

atlantis plan -p litellm

scottylabs-bot commented 2026-10-13 05:43:29 +00:00

Owner

Copy link

Ran Plan for project: litellm dir: . workspace: litellm

Show Output

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
this derivation will be built:
  /nix/store/1yy6h20rzh98k0fshlhjqciylm5d9wih-config.tf.json.drv
building '/nix/store/1yy6h20rzh98k0fshlhjqciylm5d9wih-config.tf.json.drv'...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing cloudflare/cloudflare v5.27.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.27.0 (unauthenticated)
- Using cloudflare/cloudflare v5.27.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.litellm_salt_key: Refreshing state... [id=none]
random_password.cli_proxy_api_key: Refreshing state... [id=none]
random_password.litellm_master_key: Refreshing state... [id=none]
vault_kv_secret_v2.litellm_salt_key: Refreshing state... [id=secret/data/infra/litellm-salt-key]
vault_kv_secret_v2.cli_proxy_api_key: Refreshing state... [id=secret/data/infra/cli-proxy-api-key]
vault_kv_secret_v2.litellm_master_key: Refreshing state... [id=secret/data/infra/litellm-master-key]
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 1s [id=scottylabs]
keycloak_openid_client.litellm: Refreshing state... [id=4ee5ecdd-c370-4a52-93ae-744332e0a509]
keycloak_openid_group_membership_protocol_mapper.litellm_groups: Refreshing state... [id=b2e932af-b3e8-4cac-a6ea-027c1022a22f]
vault_kv_secret_v2.litellm_oidc: Refreshing state... [id=secret/data/infra/litellm-oidc]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["litellm"]: Refreshing state... [id=0fa6e5399aa6a69d978d6d425ca14f44]

OpenTofu used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place (current -> planned)

OpenTofu will perform the following actions:

  # cloudflare_dns_record.this["litellm"] will be updated in-place
!   resource "cloudflare_dns_record" "this" {
        id                      = "0fa6e5399aa6a69d978d6d425ca14f44"
+       include_shadow_metadata = false
        name                    = "litellm.scottylabs.org"
        tags                    = []
        # (12 unchanged attributes hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

─────────────────────────────────────────────────────────────────────────────

Saved the plan to:
/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/litellm/litellm-litellm.tfplan

To perform exactly these actions, run the following command to apply:
    tofu apply "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/litellm/litellm-litellm.tfplan"

• ▶️ To apply this plan, comment:

  atlantis apply -p litellm
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p litellm
  

Plan: 0 to add, 1 to change, 0 to destroy.

---

• ⏩ To apply all unapplied plans from this Pull Request, comment:

  atlantis apply
  

• 🚮 To delete all plans and locks from this Pull Request, comment:

  atlantis unlock
  

Ran Plan for project: `litellm` dir: `.` workspace: `litellm` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it this derivation will be built: /nix/store/1yy6h20rzh98k0fshlhjqciylm5d9wih-config.tf.json.drv building '/nix/store/1yy6h20rzh98k0fshlhjqciylm5d9wih-config.tf.json.drv'... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing cloudflare/cloudflare v5.27.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.27.0 (unauthenticated) - Using cloudflare/cloudflare v5.27.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.litellm_salt_key: Refreshing state... [id=none] random_password.cli_proxy_api_key: Refreshing state... [id=none] random_password.litellm_master_key: Refreshing state... [id=none] vault_kv_secret_v2.litellm_salt_key: Refreshing state... [id=secret/data/infra/litellm-salt-key] vault_kv_secret_v2.cli_proxy_api_key: Refreshing state... [id=secret/data/infra/cli-proxy-api-key] vault_kv_secret_v2.litellm_master_key: Refreshing state... [id=secret/data/infra/litellm-master-key] data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 1s [id=scottylabs] keycloak_openid_client.litellm: Refreshing state... [id=4ee5ecdd-c370-4a52-93ae-744332e0a509] keycloak_openid_group_membership_protocol_mapper.litellm_groups: Refreshing state... [id=b2e932af-b3e8-4cac-a6ea-027c1022a22f] vault_kv_secret_v2.litellm_oidc: Refreshing state... [id=secret/data/infra/litellm-oidc] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["litellm"]: Refreshing state... [id=0fa6e5399aa6a69d978d6d425ca14f44] OpenTofu used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols: ~ update in-place (current -> planned) OpenTofu will perform the following actions: # cloudflare_dns_record.this["litellm"] will be updated in-place ! resource "cloudflare_dns_record" "this" { id = "0fa6e5399aa6a69d978d6d425ca14f44" + include_shadow_metadata = false name = "litellm.scottylabs.org" tags = [] # (12 unchanged attributes hidden) } Plan: 0 to add, 1 to change, 0 to destroy. ───────────────────────────────────────────────────────────────────────────── Saved the plan to: /var/lib/atlantis/repos/ScottyLabs/infrastructure/159/litellm/litellm-litellm.tfplan To perform exactly these actions, run the following command to apply: tofu apply "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/litellm/litellm-litellm.tfplan" ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p litellm ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Flitellm%252Flitellm) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p litellm ``` Plan: 0 to add, 1 to change, 0 to destroy. --- * :fast_forward: To **apply** all unapplied plans from this Pull Request, comment: ```shell atlantis apply ``` * :put_litter_in_its_place: To **delete** all plans and locks from this Pull Request, comment: ```shell atlantis unlock ```

anish commented 2026-10-13 05:44:55 +00:00

Author

Owner

Copy link

atlantis apply

atlantis apply

scottylabs-bot commented 2026-10-13 05:45:07 +00:00

Owner

Copy link

Ran Apply for 17 projects:

1. project: governance dir: . workspace: governance
2. project: ricochet dir: . workspace: ricochet
3. project: litellm dir: . workspace: litellm
4. project: atlantis dir: . workspace: atlantis
5. project: headscale dir: . workspace: headscale
6. project: keycloak dir: . workspace: keycloak
7. project: posthog dir: . workspace: posthog
8. project: openbao dir: . workspace: openbao
9. project: snot dir: . workspace: snot
10. project: garage-webadmin dir: . workspace: garage-webadmin
11. project: forgejo dir: . workspace: forgejo
12. project: kennel dir: . workspace: kennel
13. project: hosts dir: . workspace: hosts
14. project: observability dir: . workspace: observability
15. project: webhook dir: . workspace: webhook
16. project: vaultwarden dir: . workspace: vaultwarden
17. project: matrix dir: . workspace: matrix

---

1. project: governance dir: . workspace: governance

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

Outputs:

governance_approle_role_id = "985fa7b6-334c-4e8c-5780-46dc57798bbf"

---

2. project: ricochet dir: . workspace: ricochet

Apply Error

Show Output

running 'sh -c' 'tofu apply -input=false "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/ricochet': exit status 1: running "tofu apply -input=false \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/ricochet": 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
cloudflare_dns_record.this["oauth"]: Modifying... [id=346fac8950e4873a27d5cfb72104783d]
╷
│ Error: Provider produced inconsistent result after apply
│ 
│ When applying changes to cloudflare_dns_record.this["oauth"], provider
│ "provider[\"registry.opentofu.org/cloudflare/cloudflare\"]" produced an
│ unexpected new value: .modified_on: was
│ cty.StringVal("2026-07-28T05:45:52Z"), but now
│ cty.StringVal("2026-10-13T05:45:03Z").
│ 
│ This is a bug in the provider, which should be reported in the provider's
│ own issue tracker.
╵

---

3. project: litellm dir: . workspace: litellm

Apply Error

Show Output

running 'sh -c' 'tofu apply -input=false "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/litellm': exit status 1: running "tofu apply -input=false \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/litellm": 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
cloudflare_dns_record.this["litellm"]: Modifying... [id=0fa6e5399aa6a69d978d6d425ca14f44]
╷
│ Error: Provider produced inconsistent result after apply
│ 
│ When applying changes to cloudflare_dns_record.this["litellm"], provider
│ "provider[\"registry.opentofu.org/cloudflare/cloudflare\"]" produced an
│ unexpected new value: .modified_on: was
│ cty.StringVal("2026-07-28T05:45:52Z"), but now
│ cty.StringVal("2026-10-13T05:45:03Z").
│ 
│ This is a bug in the provider, which should be reported in the provider's
│ own issue tracker.
╵

---

4. project: atlantis dir: . workspace: atlantis

Apply Error

Show Output

running 'sh -c' 'tofu apply -input=false "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/atlantis': exit status 1: running "tofu apply -input=false \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/atlantis": 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
cloudflare_dns_record.this["atlantis"]: Modifying... [id=d0419d10a0c0bb715bcbadc7a1c73cbb]
╷
│ Error: Provider produced inconsistent result after apply
│ 
│ When applying changes to cloudflare_dns_record.this["atlantis"], provider
│ "provider[\"registry.opentofu.org/cloudflare/cloudflare\"]" produced an
│ unexpected new value: .modified_on: was
│ cty.StringVal("2026-07-28T05:45:52Z"), but now
│ cty.StringVal("2026-10-13T05:45:04Z").
│ 
│ This is a bug in the provider, which should be reported in the provider's
│ own issue tracker.
╵

---

5. project: headscale dir: . workspace: headscale

Apply Error

Show Output

running 'sh -c' 'tofu apply -input=false "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/headscale': exit status 1: running "tofu apply -input=false \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/headscale": 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
cloudflare_dns_record.this["headscale"]: Modifying... [id=4207dabef0c8dc1972f9d5aa1cd17a00]
cloudflare_dns_record.this["headplane"]: Modifying... [id=9139cfa1f058db85d837defe0460fd20]
╷
│ Error: Provider produced inconsistent result after apply
│ 
│ When applying changes to cloudflare_dns_record.this["headscale"], provider
│ "provider[\"registry.opentofu.org/cloudflare/cloudflare\"]" produced an
│ unexpected new value: .modified_on: was
│ cty.StringVal("2026-07-21T19:25:54Z"), but now
│ cty.StringVal("2026-10-13T05:45:03Z").
│ 
│ This is a bug in the provider, which should be reported in the provider's
│ own issue tracker.
╵
╷
│ Error: Provider produced inconsistent result after apply
│ 
│ When applying changes to cloudflare_dns_record.this["headplane"], provider
│ "provider[\"registry.opentofu.org/cloudflare/cloudflare\"]" produced an
│ unexpected new value: .modified_on: was
│ cty.StringVal("2026-07-28T05:45:51Z"), but now
│ cty.StringVal("2026-10-13T05:45:04Z").
│ 
│ This is a bug in the provider, which should be reported in the provider's
│ own issue tracker.
╵

---

6. project: keycloak dir: . workspace: keycloak

Apply Error

Show Output

running 'sh -c' 'tofu apply -input=false "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/keycloak': exit status 1: running "tofu apply -input=false \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/keycloak": 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
cloudflare_dns_record.this["idp"]: Modifying... [id=76512b10636c34a8230d5618d365d6bc]
╷
│ Error: Provider produced inconsistent result after apply
│ 
│ When applying changes to cloudflare_dns_record.this["idp"], provider
│ "provider[\"registry.opentofu.org/cloudflare/cloudflare\"]" produced an
│ unexpected new value: .modified_on: was
│ cty.StringVal("2026-07-28T05:45:52Z"), but now
│ cty.StringVal("2026-10-13T05:45:04Z").
│ 
│ This is a bug in the provider, which should be reported in the provider's
│ own issue tracker.
╵

---

7. project: posthog dir: . workspace: posthog

Apply Error

Show Output

running 'sh -c' 'tofu apply -input=false "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/posthog': exit status 1: running "tofu apply -input=false \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/posthog": 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
cloudflare_dns_record.this["v"]: Modifying... [id=a34d75a85d3128693767b2db9b7f233e]
╷
│ Error: Provider produced inconsistent result after apply
│ 
│ When applying changes to cloudflare_dns_record.this["v"], provider
│ "provider[\"registry.opentofu.org/cloudflare/cloudflare\"]" produced an
│ unexpected new value: .modified_on: was
│ cty.StringVal("2026-07-21T19:25:53Z"), but now
│ cty.StringVal("2026-10-13T05:45:04Z").
│ 
│ This is a bug in the provider, which should be reported in the provider's
│ own issue tracker.
╵

---

8. project: openbao dir: . workspace: openbao

Apply Error

Show Output

running 'sh -c' 'tofu apply -input=false "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/openbao': exit status 1: running "tofu apply -input=false \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/openbao": 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
cloudflare_dns_record.this["secrets"]: Modifying... [id=c24ad8899e7a3b573f1d2d7b95711926]
╷
│ Error: Provider produced inconsistent result after apply
│ 
│ When applying changes to cloudflare_dns_record.this["secrets"], provider
│ "provider[\"registry.opentofu.org/cloudflare/cloudflare\"]" produced an
│ unexpected new value: .modified_on: was
│ cty.StringVal("2026-07-28T05:45:52Z"), but now
│ cty.StringVal("2026-10-13T05:45:04Z").
│ 
│ This is a bug in the provider, which should be reported in the provider's
│ own issue tracker.
╵

---

9. project: snot dir: . workspace: snot

Apply Error

Show Output

running 'sh -c' 'tofu apply -input=false "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/snot': exit status 1: running "tofu apply -input=false \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/snot": 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
cloudflare_dns_record.this["knot"]: Modifying... [id=264276915648465296ad9d24fb70a29b]
╷
│ Error: Provider produced inconsistent result after apply
│ 
│ When applying changes to cloudflare_dns_record.this["knot"], provider
│ "provider[\"registry.opentofu.org/cloudflare/cloudflare\"]" produced an
│ unexpected new value: .modified_on: was
│ cty.StringVal("2026-08-06T05:37:30Z"), but now
│ cty.StringVal("2026-10-13T05:45:04Z").
│ 
│ This is a bug in the provider, which should be reported in the provider's
│ own issue tracker.
╵

---

10. project: garage-webadmin dir: . workspace: garage-webadmin

Apply Error

Show Output

running 'sh -c' 'tofu apply -input=false "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/garage-webadmin': exit status 1: running "tofu apply -input=false \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/garage-webadmin": 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
cloudflare_dns_record.this["garage"]: Modifying... [id=4054146ceff1515773704f89136b25f1]
╷
│ Error: Provider produced inconsistent result after apply
│ 
│ When applying changes to cloudflare_dns_record.this["garage"], provider
│ "provider[\"registry.opentofu.org/cloudflare/cloudflare\"]" produced an
│ unexpected new value: .modified_on: was
│ cty.StringVal("2026-07-28T05:45:52Z"), but now
│ cty.StringVal("2026-10-13T05:45:04Z").
│ 
│ This is a bug in the provider, which should be reported in the provider's
│ own issue tracker.
╵

---

11. project: forgejo dir: . workspace: forgejo

Apply Error

Show Output

running 'sh -c' 'tofu apply -input=false "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/forgejo': exit status 1: running "tofu apply -input=false \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/forgejo": 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
cloudflare_dns_record.this["git"]: Modifying... [id=f0fa6f4acf6bf381474c1a9304225f68]
╷
│ Error: Provider produced inconsistent result after apply
│ 
│ When applying changes to cloudflare_dns_record.this["git"], provider
│ "provider[\"registry.opentofu.org/cloudflare/cloudflare\"]" produced an
│ unexpected new value: .modified_on: was
│ cty.StringVal("2026-08-06T05:37:30Z"), but now
│ cty.StringVal("2026-10-13T05:45:04Z").
│ 
│ This is a bug in the provider, which should be reported in the provider's
│ own issue tracker.
╵

---

12. project: kennel dir: . workspace: kennel

Apply Error

Show Output

running 'sh -c' 'tofu apply -input=false "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/kennel': exit status 1: running "tofu apply -input=false \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/kennel": 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
cloudflare_dns_record.this["kennel"]: Modifying... [id=a34066db99519085f24a01cebcb25d69]
cloudflare_dns_record.this["s3.kennel"]: Modifying... [id=d3acfc0e5ca45e0704c40d9e3fa2e60f]
cloudflare_dns_record.this["*"]: Modifying... [id=2d4b06ae1c39a5d196a27114e07c97e9]
╷
│ Error: Provider produced inconsistent result after apply
│ 
│ When applying changes to cloudflare_dns_record.this["kennel"], provider
│ "provider[\"registry.opentofu.org/cloudflare/cloudflare\"]" produced an
│ unexpected new value: .modified_on: was
│ cty.StringVal("2026-07-28T05:45:50Z"), but now
│ cty.StringVal("2026-10-13T05:45:04Z").
│ 
│ This is a bug in the provider, which should be reported in the provider's
│ own issue tracker.
╵
╷
│ Error: Provider produced inconsistent result after apply
│ 
│ When applying changes to cloudflare_dns_record.this["*"], provider
│ "provider[\"registry.opentofu.org/cloudflare/cloudflare\"]" produced an
│ unexpected new value: .modified_on: was
│ cty.StringVal("2026-07-28T05:45:50Z"), but now
│ cty.StringVal("2026-10-13T05:45:04Z").
│ 
│ This is a bug in the provider, which should be reported in the provider's
│ own issue tracker.
╵
╷
│ Error: Provider produced inconsistent result after apply
│ 
│ When applying changes to cloudflare_dns_record.this["s3.kennel"], provider
│ "provider[\"registry.opentofu.org/cloudflare/cloudflare\"]" produced an
│ unexpected new value: .modified_on: was
│ cty.StringVal("2026-07-28T05:45:50Z"), but now
│ cty.StringVal("2026-10-13T05:45:04Z").
│ 
│ This is a bug in the provider, which should be reported in the provider's
│ own issue tracker.
╵

---

13. project: hosts dir: . workspace: hosts

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
cloudflare_dns_record.this["signage-01"]: Modifying... [id=a80079e44697aebac2cbda4ab85a79ee]
cloudflare_dns_record.this["deploy-01"]: Modifying... [id=bcb794198cc3e1ad25e3707e3af7fd1d]
cloudflare_dns_record.this["infra-01"]: Modifying... [id=30f50d5655d03d54b472480be1476c1c]
cloudflare_dns_record.this["snoopy"]: Modifying... [id=7f849c841bba1c0d46009308acaf7f55]
cloudflare_dns_record.this["infra-02"]: Modifying... [id=1856c054b772a4ac62e0f53625163997]
cloudflare_dns_record.this["deploy-01"]: Modifications complete after 1s [id=bcb794198cc3e1ad25e3707e3af7fd1d]
cloudflare_dns_record.this["infra-01"]: Modifications complete after 1s [id=30f50d5655d03d54b472480be1476c1c]
cloudflare_dns_record.this["infra-02"]: Modifications complete after 1s [id=1856c054b772a4ac62e0f53625163997]
cloudflare_dns_record.this["signage-01"]: Modifications complete after 1s [id=a80079e44697aebac2cbda4ab85a79ee]
cloudflare_dns_record.this["snoopy"]: Modifications complete after 1s [id=7f849c841bba1c0d46009308acaf7f55]

Apply complete! Resources: 0 added, 5 changed, 0 destroyed.

---

14. project: observability dir: . workspace: observability

Apply Error

Show Output

running 'sh -c' 'tofu apply -input=false "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/observability': exit status 1: running "tofu apply -input=false \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/observability": 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
cloudflare_dns_record.this["uptime"]: Modifying... [id=0909f2bd8ade5d54a53b58a2a3fef540]
cloudflare_dns_record.this["grafana"]: Modifying... [id=9924f9e66892a5aeafe09ed0128a65a0]
╷
│ Error: Provider produced inconsistent result after apply
│ 
│ When applying changes to cloudflare_dns_record.this["uptime"], provider
│ "provider[\"registry.opentofu.org/cloudflare/cloudflare\"]" produced an
│ unexpected new value: .modified_on: was
│ cty.StringVal("2026-07-28T05:45:50Z"), but now
│ cty.StringVal("2026-10-13T05:45:03Z").
│ 
│ This is a bug in the provider, which should be reported in the provider's
│ own issue tracker.
╵
╷
│ Error: Provider produced inconsistent result after apply
│ 
│ When applying changes to cloudflare_dns_record.this["grafana"], provider
│ "provider[\"registry.opentofu.org/cloudflare/cloudflare\"]" produced an
│ unexpected new value: .modified_on: was
│ cty.StringVal("2026-07-28T05:45:50Z"), but now
│ cty.StringVal("2026-10-13T05:45:04Z").
│ 
│ This is a bug in the provider, which should be reported in the provider's
│ own issue tracker.
╵

---

15. project: webhook dir: . workspace: webhook

Apply Error

Show Output

running 'sh -c' 'tofu apply -input=false "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/webhook': exit status 1: running "tofu apply -input=false \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/webhook": 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
cloudflare_dns_record.this["webhooks"]: Modifying... [id=0ec7b1a8c64ceb6e83ded9a5842a1198]
╷
│ Error: Provider produced inconsistent result after apply
│ 
│ When applying changes to cloudflare_dns_record.this["webhooks"], provider
│ "provider[\"registry.opentofu.org/cloudflare/cloudflare\"]" produced an
│ unexpected new value: .modified_on: was
│ cty.StringVal("2026-08-06T05:37:31Z"), but now
│ cty.StringVal("2026-10-13T05:45:05Z").
│ 
│ This is a bug in the provider, which should be reported in the provider's
│ own issue tracker.
╵

---

16. project: vaultwarden dir: . workspace: vaultwarden

Apply Error

Show Output

running 'sh -c' 'tofu apply -input=false "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/vaultwarden': exit status 1: running "tofu apply -input=false \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/vaultwarden": 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
cloudflare_dns_record.this["vault"]: Modifying... [id=7828e0eeb9e7f251c797f565828a47f6]
╷
│ Error: Provider produced inconsistent result after apply
│ 
│ When applying changes to cloudflare_dns_record.this["vault"], provider
│ "provider[\"registry.opentofu.org/cloudflare/cloudflare\"]" produced an
│ unexpected new value: .modified_on: was
│ cty.StringVal("2026-07-28T05:45:49Z"), but now
│ cty.StringVal("2026-10-13T05:45:05Z").
│ 
│ This is a bug in the provider, which should be reported in the provider's
│ own issue tracker.
╵

---

17. project: matrix dir: . workspace: matrix

Apply Error

Show Output

running 'sh -c' 'tofu apply -input=false "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/matrix': exit status 1: running "tofu apply -input=false \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/matrix": 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
cloudflare_dns_record.this["matrix"]: Modifying... [id=c37d2e1a4edf950b4af4544574c159a8]
cloudflare_dns_record.this["@"]: Modifying... [id=63ff3b423afd444f8bd31201db232ada]
╷
│ Error: Provider produced inconsistent result after apply
│ 
│ When applying changes to cloudflare_dns_record.this["matrix"], provider
│ "provider[\"registry.opentofu.org/cloudflare/cloudflare\"]" produced an
│ unexpected new value: .modified_on: was
│ cty.StringVal("2026-07-28T05:45:52Z"), but now
│ cty.StringVal("2026-10-13T05:45:05Z").
│ 
│ This is a bug in the provider, which should be reported in the provider's
│ own issue tracker.
╵
╷
│ Error: Provider produced inconsistent result after apply
│ 
│ When applying changes to cloudflare_dns_record.this["@"], provider
│ "provider[\"registry.opentofu.org/cloudflare/cloudflare\"]" produced an
│ unexpected new value: .modified_on: was
│ cty.StringVal("2026-07-28T05:45:52Z"), but now
│ cty.StringVal("2026-10-13T05:45:06Z").
│ 
│ This is a bug in the provider, which should be reported in the provider's
│ own issue tracker.
╵

---

Apply Summary

17 projects, 2 successful, 0 failed, 15 errored

Ran Apply for 17 projects: 1. project: `governance` dir: `.` workspace: `governance` 1. project: `ricochet` dir: `.` workspace: `ricochet` 1. project: `litellm` dir: `.` workspace: `litellm` 1. project: `atlantis` dir: `.` workspace: `atlantis` 1. project: `headscale` dir: `.` workspace: `headscale` 1. project: `keycloak` dir: `.` workspace: `keycloak` 1. project: `posthog` dir: `.` workspace: `posthog` 1. project: `openbao` dir: `.` workspace: `openbao` 1. project: `snot` dir: `.` workspace: `snot` 1. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin` 1. project: `forgejo` dir: `.` workspace: `forgejo` 1. project: `kennel` dir: `.` workspace: `kennel` 1. project: `hosts` dir: `.` workspace: `hosts` 1. project: `observability` dir: `.` workspace: `observability` 1. project: `webhook` dir: `.` workspace: `webhook` 1. project: `vaultwarden` dir: `.` workspace: `vaultwarden` 1. project: `matrix` dir: `.` workspace: `matrix` --- ### 1. project: `governance` dir: `.` workspace: `governance` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. Outputs: governance_approle_role_id = "985fa7b6-334c-4e8c-5780-46dc57798bbf" ``` </details> --- ### 2. project: `ricochet` dir: `.` workspace: `ricochet` **Apply Error** <details><summary>Show Output</summary> ``` running 'sh -c' 'tofu apply -input=false "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/ricochet': exit status 1: running "tofu apply -input=false \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/ricochet": ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ cloudflare_dns_record.this["oauth"]: Modifying... [id=346fac8950e4873a27d5cfb72104783d] ╷ │ Error: Provider produced inconsistent result after apply │ │ When applying changes to cloudflare_dns_record.this["oauth"], provider │ "provider[\"registry.opentofu.org/cloudflare/cloudflare\"]" produced an │ unexpected new value: .modified_on: was │ cty.StringVal("2026-07-28T05:45:52Z"), but now │ cty.StringVal("2026-10-13T05:45:03Z"). │ │ This is a bug in the provider, which should be reported in the provider's │ own issue tracker. ╵ ``` </details> --- ### 3. project: `litellm` dir: `.` workspace: `litellm` **Apply Error** <details><summary>Show Output</summary> ``` running 'sh -c' 'tofu apply -input=false "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/litellm': exit status 1: running "tofu apply -input=false \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/litellm": ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ cloudflare_dns_record.this["litellm"]: Modifying... [id=0fa6e5399aa6a69d978d6d425ca14f44] ╷ │ Error: Provider produced inconsistent result after apply │ │ When applying changes to cloudflare_dns_record.this["litellm"], provider │ "provider[\"registry.opentofu.org/cloudflare/cloudflare\"]" produced an │ unexpected new value: .modified_on: was │ cty.StringVal("2026-07-28T05:45:52Z"), but now │ cty.StringVal("2026-10-13T05:45:03Z"). │ │ This is a bug in the provider, which should be reported in the provider's │ own issue tracker. ╵ ``` </details> --- ### 4. project: `atlantis` dir: `.` workspace: `atlantis` **Apply Error** <details><summary>Show Output</summary> ``` running 'sh -c' 'tofu apply -input=false "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/atlantis': exit status 1: running "tofu apply -input=false \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/atlantis": ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ cloudflare_dns_record.this["atlantis"]: Modifying... [id=d0419d10a0c0bb715bcbadc7a1c73cbb] ╷ │ Error: Provider produced inconsistent result after apply │ │ When applying changes to cloudflare_dns_record.this["atlantis"], provider │ "provider[\"registry.opentofu.org/cloudflare/cloudflare\"]" produced an │ unexpected new value: .modified_on: was │ cty.StringVal("2026-07-28T05:45:52Z"), but now │ cty.StringVal("2026-10-13T05:45:04Z"). │ │ This is a bug in the provider, which should be reported in the provider's │ own issue tracker. ╵ ``` </details> --- ### 5. project: `headscale` dir: `.` workspace: `headscale` **Apply Error** <details><summary>Show Output</summary> ``` running 'sh -c' 'tofu apply -input=false "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/headscale': exit status 1: running "tofu apply -input=false \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/headscale": ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ cloudflare_dns_record.this["headscale"]: Modifying... [id=4207dabef0c8dc1972f9d5aa1cd17a00] cloudflare_dns_record.this["headplane"]: Modifying... [id=9139cfa1f058db85d837defe0460fd20] ╷ │ Error: Provider produced inconsistent result after apply │ │ When applying changes to cloudflare_dns_record.this["headscale"], provider │ "provider[\"registry.opentofu.org/cloudflare/cloudflare\"]" produced an │ unexpected new value: .modified_on: was │ cty.StringVal("2026-07-21T19:25:54Z"), but now │ cty.StringVal("2026-10-13T05:45:03Z"). │ │ This is a bug in the provider, which should be reported in the provider's │ own issue tracker. ╵ ╷ │ Error: Provider produced inconsistent result after apply │ │ When applying changes to cloudflare_dns_record.this["headplane"], provider │ "provider[\"registry.opentofu.org/cloudflare/cloudflare\"]" produced an │ unexpected new value: .modified_on: was │ cty.StringVal("2026-07-28T05:45:51Z"), but now │ cty.StringVal("2026-10-13T05:45:04Z"). │ │ This is a bug in the provider, which should be reported in the provider's │ own issue tracker. ╵ ``` </details> --- ### 6. project: `keycloak` dir: `.` workspace: `keycloak` **Apply Error** <details><summary>Show Output</summary> ``` running 'sh -c' 'tofu apply -input=false "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/keycloak': exit status 1: running "tofu apply -input=false \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/keycloak": ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ cloudflare_dns_record.this["idp"]: Modifying... [id=76512b10636c34a8230d5618d365d6bc] ╷ │ Error: Provider produced inconsistent result after apply │ │ When applying changes to cloudflare_dns_record.this["idp"], provider │ "provider[\"registry.opentofu.org/cloudflare/cloudflare\"]" produced an │ unexpected new value: .modified_on: was │ cty.StringVal("2026-07-28T05:45:52Z"), but now │ cty.StringVal("2026-10-13T05:45:04Z"). │ │ This is a bug in the provider, which should be reported in the provider's │ own issue tracker. ╵ ``` </details> --- ### 7. project: `posthog` dir: `.` workspace: `posthog` **Apply Error** <details><summary>Show Output</summary> ``` running 'sh -c' 'tofu apply -input=false "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/posthog': exit status 1: running "tofu apply -input=false \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/posthog": ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ cloudflare_dns_record.this["v"]: Modifying... [id=a34d75a85d3128693767b2db9b7f233e] ╷ │ Error: Provider produced inconsistent result after apply │ │ When applying changes to cloudflare_dns_record.this["v"], provider │ "provider[\"registry.opentofu.org/cloudflare/cloudflare\"]" produced an │ unexpected new value: .modified_on: was │ cty.StringVal("2026-07-21T19:25:53Z"), but now │ cty.StringVal("2026-10-13T05:45:04Z"). │ │ This is a bug in the provider, which should be reported in the provider's │ own issue tracker. ╵ ``` </details> --- ### 8. project: `openbao` dir: `.` workspace: `openbao` **Apply Error** <details><summary>Show Output</summary> ``` running 'sh -c' 'tofu apply -input=false "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/openbao': exit status 1: running "tofu apply -input=false \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/openbao": ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ cloudflare_dns_record.this["secrets"]: Modifying... [id=c24ad8899e7a3b573f1d2d7b95711926] ╷ │ Error: Provider produced inconsistent result after apply │ │ When applying changes to cloudflare_dns_record.this["secrets"], provider │ "provider[\"registry.opentofu.org/cloudflare/cloudflare\"]" produced an │ unexpected new value: .modified_on: was │ cty.StringVal("2026-07-28T05:45:52Z"), but now │ cty.StringVal("2026-10-13T05:45:04Z"). │ │ This is a bug in the provider, which should be reported in the provider's │ own issue tracker. ╵ ``` </details> --- ### 9. project: `snot` dir: `.` workspace: `snot` **Apply Error** <details><summary>Show Output</summary> ``` running 'sh -c' 'tofu apply -input=false "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/snot': exit status 1: running "tofu apply -input=false \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/snot": ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ cloudflare_dns_record.this["knot"]: Modifying... [id=264276915648465296ad9d24fb70a29b] ╷ │ Error: Provider produced inconsistent result after apply │ │ When applying changes to cloudflare_dns_record.this["knot"], provider │ "provider[\"registry.opentofu.org/cloudflare/cloudflare\"]" produced an │ unexpected new value: .modified_on: was │ cty.StringVal("2026-08-06T05:37:30Z"), but now │ cty.StringVal("2026-10-13T05:45:04Z"). │ │ This is a bug in the provider, which should be reported in the provider's │ own issue tracker. ╵ ``` </details> --- ### 10. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin` **Apply Error** <details><summary>Show Output</summary> ``` running 'sh -c' 'tofu apply -input=false "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/garage-webadmin': exit status 1: running "tofu apply -input=false \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/garage-webadmin": ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ cloudflare_dns_record.this["garage"]: Modifying... [id=4054146ceff1515773704f89136b25f1] ╷ │ Error: Provider produced inconsistent result after apply │ │ When applying changes to cloudflare_dns_record.this["garage"], provider │ "provider[\"registry.opentofu.org/cloudflare/cloudflare\"]" produced an │ unexpected new value: .modified_on: was │ cty.StringVal("2026-07-28T05:45:52Z"), but now │ cty.StringVal("2026-10-13T05:45:04Z"). │ │ This is a bug in the provider, which should be reported in the provider's │ own issue tracker. ╵ ``` </details> --- ### 11. project: `forgejo` dir: `.` workspace: `forgejo` **Apply Error** <details><summary>Show Output</summary> ``` running 'sh -c' 'tofu apply -input=false "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/forgejo': exit status 1: running "tofu apply -input=false \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/forgejo": ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ cloudflare_dns_record.this["git"]: Modifying... [id=f0fa6f4acf6bf381474c1a9304225f68] ╷ │ Error: Provider produced inconsistent result after apply │ │ When applying changes to cloudflare_dns_record.this["git"], provider │ "provider[\"registry.opentofu.org/cloudflare/cloudflare\"]" produced an │ unexpected new value: .modified_on: was │ cty.StringVal("2026-08-06T05:37:30Z"), but now │ cty.StringVal("2026-10-13T05:45:04Z"). │ │ This is a bug in the provider, which should be reported in the provider's │ own issue tracker. ╵ ``` </details> --- ### 12. project: `kennel` dir: `.` workspace: `kennel` **Apply Error** <details><summary>Show Output</summary> ``` running 'sh -c' 'tofu apply -input=false "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/kennel': exit status 1: running "tofu apply -input=false \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/kennel": ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ cloudflare_dns_record.this["kennel"]: Modifying... [id=a34066db99519085f24a01cebcb25d69] cloudflare_dns_record.this["s3.kennel"]: Modifying... [id=d3acfc0e5ca45e0704c40d9e3fa2e60f] cloudflare_dns_record.this["*"]: Modifying... [id=2d4b06ae1c39a5d196a27114e07c97e9] ╷ │ Error: Provider produced inconsistent result after apply │ │ When applying changes to cloudflare_dns_record.this["kennel"], provider │ "provider[\"registry.opentofu.org/cloudflare/cloudflare\"]" produced an │ unexpected new value: .modified_on: was │ cty.StringVal("2026-07-28T05:45:50Z"), but now │ cty.StringVal("2026-10-13T05:45:04Z"). │ │ This is a bug in the provider, which should be reported in the provider's │ own issue tracker. ╵ ╷ │ Error: Provider produced inconsistent result after apply │ │ When applying changes to cloudflare_dns_record.this["*"], provider │ "provider[\"registry.opentofu.org/cloudflare/cloudflare\"]" produced an │ unexpected new value: .modified_on: was │ cty.StringVal("2026-07-28T05:45:50Z"), but now │ cty.StringVal("2026-10-13T05:45:04Z"). │ │ This is a bug in the provider, which should be reported in the provider's │ own issue tracker. ╵ ╷ │ Error: Provider produced inconsistent result after apply │ │ When applying changes to cloudflare_dns_record.this["s3.kennel"], provider │ "provider[\"registry.opentofu.org/cloudflare/cloudflare\"]" produced an │ unexpected new value: .modified_on: was │ cty.StringVal("2026-07-28T05:45:50Z"), but now │ cty.StringVal("2026-10-13T05:45:04Z"). │ │ This is a bug in the provider, which should be reported in the provider's │ own issue tracker. ╵ ``` </details> --- ### 13. project: `hosts` dir: `.` workspace: `hosts` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ cloudflare_dns_record.this["signage-01"]: Modifying... [id=a80079e44697aebac2cbda4ab85a79ee] cloudflare_dns_record.this["deploy-01"]: Modifying... [id=bcb794198cc3e1ad25e3707e3af7fd1d] cloudflare_dns_record.this["infra-01"]: Modifying... [id=30f50d5655d03d54b472480be1476c1c] cloudflare_dns_record.this["snoopy"]: Modifying... [id=7f849c841bba1c0d46009308acaf7f55] cloudflare_dns_record.this["infra-02"]: Modifying... [id=1856c054b772a4ac62e0f53625163997] cloudflare_dns_record.this["deploy-01"]: Modifications complete after 1s [id=bcb794198cc3e1ad25e3707e3af7fd1d] cloudflare_dns_record.this["infra-01"]: Modifications complete after 1s [id=30f50d5655d03d54b472480be1476c1c] cloudflare_dns_record.this["infra-02"]: Modifications complete after 1s [id=1856c054b772a4ac62e0f53625163997] cloudflare_dns_record.this["signage-01"]: Modifications complete after 1s [id=a80079e44697aebac2cbda4ab85a79ee] cloudflare_dns_record.this["snoopy"]: Modifications complete after 1s [id=7f849c841bba1c0d46009308acaf7f55] Apply complete! Resources: 0 added, 5 changed, 0 destroyed. ``` </details> --- ### 14. project: `observability` dir: `.` workspace: `observability` **Apply Error** <details><summary>Show Output</summary> ``` running 'sh -c' 'tofu apply -input=false "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/observability': exit status 1: running "tofu apply -input=false \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/observability": ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ cloudflare_dns_record.this["uptime"]: Modifying... [id=0909f2bd8ade5d54a53b58a2a3fef540] cloudflare_dns_record.this["grafana"]: Modifying... [id=9924f9e66892a5aeafe09ed0128a65a0] ╷ │ Error: Provider produced inconsistent result after apply │ │ When applying changes to cloudflare_dns_record.this["uptime"], provider │ "provider[\"registry.opentofu.org/cloudflare/cloudflare\"]" produced an │ unexpected new value: .modified_on: was │ cty.StringVal("2026-07-28T05:45:50Z"), but now │ cty.StringVal("2026-10-13T05:45:03Z"). │ │ This is a bug in the provider, which should be reported in the provider's │ own issue tracker. ╵ ╷ │ Error: Provider produced inconsistent result after apply │ │ When applying changes to cloudflare_dns_record.this["grafana"], provider │ "provider[\"registry.opentofu.org/cloudflare/cloudflare\"]" produced an │ unexpected new value: .modified_on: was │ cty.StringVal("2026-07-28T05:45:50Z"), but now │ cty.StringVal("2026-10-13T05:45:04Z"). │ │ This is a bug in the provider, which should be reported in the provider's │ own issue tracker. ╵ ``` </details> --- ### 15. project: `webhook` dir: `.` workspace: `webhook` **Apply Error** <details><summary>Show Output</summary> ``` running 'sh -c' 'tofu apply -input=false "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/webhook': exit status 1: running "tofu apply -input=false \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/webhook": ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ cloudflare_dns_record.this["webhooks"]: Modifying... [id=0ec7b1a8c64ceb6e83ded9a5842a1198] ╷ │ Error: Provider produced inconsistent result after apply │ │ When applying changes to cloudflare_dns_record.this["webhooks"], provider │ "provider[\"registry.opentofu.org/cloudflare/cloudflare\"]" produced an │ unexpected new value: .modified_on: was │ cty.StringVal("2026-08-06T05:37:31Z"), but now │ cty.StringVal("2026-10-13T05:45:05Z"). │ │ This is a bug in the provider, which should be reported in the provider's │ own issue tracker. ╵ ``` </details> --- ### 16. project: `vaultwarden` dir: `.` workspace: `vaultwarden` **Apply Error** <details><summary>Show Output</summary> ``` running 'sh -c' 'tofu apply -input=false "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/vaultwarden': exit status 1: running "tofu apply -input=false \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/vaultwarden": ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ cloudflare_dns_record.this["vault"]: Modifying... [id=7828e0eeb9e7f251c797f565828a47f6] ╷ │ Error: Provider produced inconsistent result after apply │ │ When applying changes to cloudflare_dns_record.this["vault"], provider │ "provider[\"registry.opentofu.org/cloudflare/cloudflare\"]" produced an │ unexpected new value: .modified_on: was │ cty.StringVal("2026-07-28T05:45:49Z"), but now │ cty.StringVal("2026-10-13T05:45:05Z"). │ │ This is a bug in the provider, which should be reported in the provider's │ own issue tracker. ╵ ``` </details> --- ### 17. project: `matrix` dir: `.` workspace: `matrix` **Apply Error** <details><summary>Show Output</summary> ``` running 'sh -c' 'tofu apply -input=false "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/matrix': exit status 1: running "tofu apply -input=false \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/159/matrix": ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ cloudflare_dns_record.this["matrix"]: Modifying... [id=c37d2e1a4edf950b4af4544574c159a8] cloudflare_dns_record.this["@"]: Modifying... [id=63ff3b423afd444f8bd31201db232ada] ╷ │ Error: Provider produced inconsistent result after apply │ │ When applying changes to cloudflare_dns_record.this["matrix"], provider │ "provider[\"registry.opentofu.org/cloudflare/cloudflare\"]" produced an │ unexpected new value: .modified_on: was │ cty.StringVal("2026-07-28T05:45:52Z"), but now │ cty.StringVal("2026-10-13T05:45:05Z"). │ │ This is a bug in the provider, which should be reported in the provider's │ own issue tracker. ╵ ╷ │ Error: Provider produced inconsistent result after apply │ │ When applying changes to cloudflare_dns_record.this["@"], provider │ "provider[\"registry.opentofu.org/cloudflare/cloudflare\"]" produced an │ unexpected new value: .modified_on: was │ cty.StringVal("2026-07-28T05:45:52Z"), but now │ cty.StringVal("2026-10-13T05:45:06Z"). │ │ This is a bug in the provider, which should be reported in the provider's │ own issue tracker. ╵ ``` </details> --- ### Apply Summary 17 projects, 2 successful, 0 failed, 15 errored

anish commented 2026-10-13 05:46:53 +00:00

Author

Owner

Copy link

atlantis plan

atlantis plan

scottylabs-bot commented 2026-10-13 05:47:23 +00:00

Owner

Copy link

Ran Plan for 17 projects:

1. project: posthog dir: . workspace: posthog
2. project: ricochet dir: . workspace: ricochet
3. project: litellm dir: . workspace: litellm
4. project: observability dir: . workspace: observability
5. project: forgejo dir: . workspace: forgejo
6. project: snot dir: . workspace: snot
7. project: governance dir: . workspace: governance
8. project: atlantis dir: . workspace: atlantis
9. project: garage-webadmin dir: . workspace: garage-webadmin
10. project: matrix dir: . workspace: matrix
11. project: openbao dir: . workspace: openbao
12. project: keycloak dir: . workspace: keycloak
13. project: kennel dir: . workspace: kennel
14. project: hosts dir: . workspace: hosts
15. project: webhook dir: . workspace: webhook
16. project: vaultwarden dir: . workspace: vaultwarden
17. project: headscale dir: . workspace: headscale

---

1. project: posthog dir: . workspace: posthog

Show Output

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of posthog/posthog from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed posthog/posthog v1.0.24
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.27.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
posthog_proxy_record.v: Refreshing state... [id=019cbbe2-8cae-0000-72a0-b7884cc7ec9e]
data.cloudflare_zones.all: Read complete after 2s
data.keycloak_realm.scottylabs: Reading...
cloudflare_dns_record.this["v"]: Refreshing state... [id=a34d75a85d3128693767b2db9b7f233e]
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p posthog
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p posthog
  

No changes. Your infrastructure matches the configuration.

---

2. project: ricochet dir: . workspace: ricochet

Show Output

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.27.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Reading...
data.cloudflare_zones.all: Read complete after 2s
cloudflare_dns_record.this["oauth"]: Refreshing state... [id=346fac8950e4873a27d5cfb72104783d]

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p ricochet
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p ricochet
  

No changes. Your infrastructure matches the configuration.

---

3. project: litellm dir: . workspace: litellm

Show Output

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.27.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.litellm_master_key: Refreshing state... [id=none]
random_password.litellm_salt_key: Refreshing state... [id=none]
random_password.cli_proxy_api_key: Refreshing state... [id=none]
vault_kv_secret_v2.litellm_master_key: Refreshing state... [id=secret/data/infra/litellm-master-key]
vault_kv_secret_v2.cli_proxy_api_key: Refreshing state... [id=secret/data/infra/cli-proxy-api-key]
vault_kv_secret_v2.litellm_salt_key: Refreshing state... [id=secret/data/infra/litellm-salt-key]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.litellm: Refreshing state... [id=4ee5ecdd-c370-4a52-93ae-744332e0a509]
data.cloudflare_zones.all: Reading...
keycloak_openid_group_membership_protocol_mapper.litellm_groups: Refreshing state... [id=b2e932af-b3e8-4cac-a6ea-027c1022a22f]
vault_kv_secret_v2.litellm_oidc: Refreshing state... [id=secret/data/infra/litellm-oidc]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["litellm"]: Refreshing state... [id=0fa6e5399aa6a69d978d6d425ca14f44]

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p litellm
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p litellm
  

No changes. Your infrastructure matches the configuration.

---

4. project: observability dir: . workspace: observability

Show Output

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.27.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.grafana_secret_key: Refreshing state... [id=none]
vault_kv_secret_v2.grafana_secret_key: Refreshing state... [id=secret/data/infra/grafana-secret-key]
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
garage_key.loki: Refreshing state... [id=GKeed8ed294debe12a38bbd470]
garage_key.tempo: Refreshing state... [id=GK9769dcb3b38a1ae26ac62b3c]
garage_bucket.loki_chunks: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3]
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
garage_bucket.tempo_traces: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c]
keycloak_openid_client.grafana: Refreshing state... [id=527e25bc-77c3-43d5-ac28-32aa2f21fa9c]
vault_kv_secret_v2.loki_s3: Refreshing state... [id=secret/data/infra/loki-s3]
garage_bucket_permission.loki: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3/GKeed8ed294debe12a38bbd470]
vault_kv_secret_v2.tempo_s3: Refreshing state... [id=secret/data/infra/tempo-s3]
garage_bucket_permission.tempo: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c/GK9769dcb3b38a1ae26ac62b3c]
vault_kv_secret_v2.grafana_oidc: Refreshing state... [id=secret/data/infra/grafana-oidc]
keycloak_openid_group_membership_protocol_mapper.grafana_groups: Refreshing state... [id=5c54e939-7a03-4857-93f5-437ca25e206e]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["uptime"]: Refreshing state... [id=0909f2bd8ade5d54a53b58a2a3fef540]
cloudflare_dns_record.this["grafana"]: Refreshing state... [id=9924f9e66892a5aeafe09ed0128a65a0]

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p observability
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p observability
  

No changes. Your infrastructure matches the configuration.

---

5. project: forgejo dir: . workspace: forgejo

Show Output

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/0cb729ebf55dd091fac47575a867afa3c2b642db1d8bb945df61e748eabb1f63.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.27.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
garage_key.forgejo: Refreshing state... [id=GKea9810d648000e3e3b8df725]
garage_bucket.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960]
vault_kv_secret_v2.forgejo_storage: Refreshing state... [id=secret/data/infra/forgejo-storage]
garage_bucket_permission.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960/GKea9810d648000e3e3b8df725]
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 1s [id=scottylabs]
keycloak_openid_client.forgejo: Refreshing state... [id=110b9b02-18e1-4bac-b5ce-936bbfbc83d6]
vault_kv_secret_v2.forgejo_oidc: Refreshing state... [id=secret/data/infra/forgejo-oidc]
keycloak_openid_group_membership_protocol_mapper.forgejo_groups: Refreshing state... [id=72c7154f-372d-4a39-97c0-6516a88d6198]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["git"]: Refreshing state... [id=f0fa6f4acf6bf381474c1a9304225f68]

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p forgejo
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p forgejo
  

No changes. Your infrastructure matches the configuration.

---

6. project: snot dir: . workspace: snot

Show Output

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/0cb729ebf55dd091fac47575a867afa3c2b642db1d8bb945df61e748eabb1f63.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.27.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["knot"]: Refreshing state... [id=264276915648465296ad9d24fb70a29b]

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p snot
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p snot
  

No changes. Your infrastructure matches the configuration.

---

7. project: governance dir: . workspace: governance

Show Output

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/0cb729ebf55dd091fac47575a867afa3c2b642db1d8bb945df61e748eabb1f63.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.27.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.keycloak_openid_client.realm_management: Reading...
keycloak_openid_client.governance_cli: Refreshing state... [id=f19d0308-19a8-4fc4-aa5f-f909fc38c5fe]
data.keycloak_openid_client.realm_management: Read complete after 0s [id=a0a15f13-b554-4bed-9fb2-3e63e0301278]
vault_kv_secret_v2.governance_ci_bot_token: Refreshing state... [id=secret/data/secretspec/governance/ci/BOT_TOKEN]
vault_policy.governance: Refreshing state... [id=governance]
vault_approle_auth_backend_role.governance: Refreshing state... [id=auth/approle/role/governance]
data.cloudflare_zones.all: Reading...
vault_kv_secret_v2.governance_ci_keycloak_client_secret: Refreshing state... [id=secret/data/secretspec/governance/ci/KEYCLOAK_CLIENT_SECRET]
vault_kv_secret_v2.governance_ci_keycloak_client_id: Refreshing state... [id=secret/data/secretspec/governance/ci/KEYCLOAK_CLIENT_ID]
keycloak_openid_client_service_account_role.governance_cli_realm_management["manage-clients"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/366f6242-2ce3-4be8-b861-3561e3c4b865]
keycloak_openid_client_service_account_role.governance_cli_realm_management["view-users"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/65f4c673-fc55-430c-b4b6-fd14ed151966]
keycloak_openid_client_service_account_role.governance_cli_realm_management["query-clients"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/16d40468-7ba1-4f17-ba0d-0741880f291a]
keycloak_openid_client_service_account_role.governance_cli_realm_management["manage-users"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/eb96eb71-82eb-4317-b8f5-326472e11484]
data.cloudflare_zones.all: Read complete after 1s

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p governance
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p governance
  

No changes. Your infrastructure matches the configuration.

---

8. project: atlantis dir: . workspace: atlantis

Show Output

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of svalabs/forgejo from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed svalabs/forgejo v1.6.1
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.27.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.atlantis_webhook_secret: Refreshing state... [id=none]
vault_kv_secret_v2.atlantis_webhook: Refreshing state... [id=secret/data/infra/atlantis]
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.cloudflare_zones.all: Read complete after 1s
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.forgejo_repository.infrastructure: Reading...
data.forgejo_repository.governance: Reading...
data.forgejo_repository.infrastructure: Read complete after 0s [name=infrastructure]
data.forgejo_repository.governance: Read complete after 0s [name=governance]
forgejo_repository_webhook.infrastructure: Refreshing state...
forgejo_repository_webhook.governance: Refreshing state...
cloudflare_dns_record.this["atlantis"]: Refreshing state... [id=d0419d10a0c0bb715bcbadc7a1c73cbb]

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p atlantis
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p atlantis
  

No changes. Your infrastructure matches the configuration.

---

9. project: garage-webadmin dir: . workspace: garage-webadmin

Show Output

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/0cb729ebf55dd091fac47575a867afa3c2b642db1d8bb945df61e748eabb1f63.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.27.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.garage_webadmin_jwt: Refreshing state... [id=none]
vault_kv_secret_v2.garage_webadmin_jwt: Refreshing state... [id=secret/data/infra/garage-webadmin-jwt]
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.garage_webadmin: Refreshing state... [id=a48c9f66-cde3-463d-970c-b2d7de716185]
keycloak_openid_group_membership_protocol_mapper.garage_webadmin_groups: Refreshing state... [id=a86e928b-6c7a-4081-a291-637e752fbabf]
vault_kv_secret_v2.garage_webadmin_oidc: Refreshing state... [id=secret/data/infra/garage-webadmin-oidc]
data.cloudflare_zones.all: Read complete after 0s
cloudflare_dns_record.this["garage"]: Refreshing state... [id=4054146ceff1515773704f89136b25f1]

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p garage-webadmin
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p garage-webadmin
  

No changes. Your infrastructure matches the configuration.

---

10. project: matrix dir: . workspace: matrix

Show Output

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/0cb729ebf55dd091fac47575a867afa3c2b642db1d8bb945df61e748eabb1f63.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.27.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["matrix"]: Refreshing state... [id=c37d2e1a4edf950b4af4544574c159a8]
cloudflare_dns_record.this["@"]: Refreshing state... [id=63ff3b423afd444f8bd31201db232ada]

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p matrix
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p matrix
  

No changes. Your infrastructure matches the configuration.

---

11. project: openbao dir: . workspace: openbao

Show Output

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/0cb729ebf55dd091fac47575a867afa3c2b642db1d8bb945df61e748eabb1f63.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.27.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.openbao: Refreshing state... [id=86926066-77c5-458e-be5a-cb585b75c818]
vault_policy.devops: Refreshing state... [id=devops]
vault_mount.kv: Refreshing state... [id=secret]
vault_policy.infra: Refreshing state... [id=infra]
vault_policy.ci: Refreshing state... [id=ci]
vault_policy.shared_read: Refreshing state... [id=shared-read]
vault_auth_backend.approle: Refreshing state... [id=approle]
vault_jwt_auth_backend.forgejo: Refreshing state... [id=jwt]
vault_identity_group.all_members: Refreshing state... [id=17a94032-1dfa-8c66-af1f-ac3942f8d13f]
vault_approle_auth_backend_role.host["signage-01"]: Refreshing state... [id=auth/approle/role/signage-01]
vault_approle_auth_backend_role.host["snoopy"]: Refreshing state... [id=auth/approle/role/snoopy]
vault_identity_group.devops: Refreshing state... [id=6922ccb6-70c2-acef-0580-49477441e3ff]
vault_approle_auth_backend_role.host["infra-01"]: Refreshing state... [id=auth/approle/role/infra-01]
vault_approle_auth_backend_role.host["deploy-01"]: Refreshing state... [id=auth/approle/role/deploy-01]
vault_kv_secret_v2.cachix: Refreshing state... [id=secret/data/shared/cachix]
vault_jwt_auth_backend_role.ci: Refreshing state... [id=auth/jwt/role/ci]
vault_jwt_auth_backend.oidc: Refreshing state... [id=oidc]
keycloak_openid_group_membership_protocol_mapper.openbao_groups: Refreshing state... [id=cafd878e-dbc6-4376-95de-f09c2e5b9870]
vault_identity_group_alias.devops: Refreshing state... [id=f7f8c2b9-125e-5c92-efda-361e93cd2d2a]
vault_identity_group_alias.all_members: Refreshing state... [id=3371c9f2-3d4b-eafe-20e5-f2bfed63fdb9]
vault_jwt_auth_backend_role.default: Refreshing state... [id=auth/oidc/role/default]
data.cloudflare_zones.all: Reading...
data.cloudflare_zones.all: Read complete after 0s
cloudflare_dns_record.this["secrets"]: Refreshing state... [id=c24ad8899e7a3b573f1d2d7b95711926]

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p openbao
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p openbao
  

No changes. Your infrastructure matches the configuration.

---

12. project: keycloak dir: . workspace: keycloak

Show Output

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/0cb729ebf55dd091fac47575a867afa3c2b642db1d8bb945df61e748eabb1f63.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.27.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.keycloak_realm.scottylabs: Reading...
data.vault_kv_secret_v2.forgejo_idp: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.vault_kv_secret_v2.keycloak_ldap: Reading...
data.vault_kv_secret_v2.keycloak_idp: Reading...
data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp]
data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp]
keycloak_oidc_identity_provider.cmu: Refreshing state... [id=cmu]
keycloak_oidc_google_identity_provider.google: Refreshing state... [id=google]
data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap]
keycloak_saml_identity_provider.cmu_saml: Refreshing state... [id=cmu-saml]
keycloak_oidc_identity_provider.slack: Refreshing state... [id=slack]
keycloak_oidc_identity_provider.cmu_git: Refreshing state... [id=cmu-dev]
keycloak_ldap_user_federation.cmu: Refreshing state... [id=TtPPdhQJRUSFFwr_nJ2gcA]
keycloak_realm_user_profile.scottylabs: Refreshing state... [id=scottylabs]
data.cloudflare_zones.all: Reading...
keycloak_custom_identity_provider_mapper.cmu_username: Refreshing state... [id=65d1857d-19e5-4db5-940c-7751b770b4ac]
keycloak_custom_identity_provider_mapper.cmudev_id: Refreshing state... [id=5944bfd3-9704-482e-ac25-c41a40351cd7]
keycloak_custom_identity_provider_mapper.cmudev_email: Refreshing state... [id=2763e7d7-f102-479e-a560-41704bcf5e4b]
keycloak_custom_identity_provider_mapper.cmudev_username: Refreshing state... [id=8f04fb48-8434-43d6-accd-5b3a1e48e9b2]
keycloak_custom_identity_provider_mapper.cmudev_name: Refreshing state... [id=17703dd7-f88f-4d6b-88f0-e7561e796c8f]
keycloak_custom_identity_provider_mapper.slack_name: Refreshing state... [id=2e4d5410-12d5-46b3-b3d4-7f5b17ee0556]
keycloak_custom_identity_provider_mapper.slack_id: Refreshing state... [id=7d6f3768-e0a7-41c2-b252-95d2709c65b7]
keycloak_custom_identity_provider_mapper.slack_email: Refreshing state... [id=ea769c6c-b497-49ec-9a4d-8ba28005e62d]
keycloak_custom_identity_provider_mapper.cmu_saml_username: Refreshing state... [id=32fed5ec-b30e-4b69-90a3-64c58f592ded]
keycloak_custom_identity_provider_mapper.google_name: Refreshing state... [id=9d5c678f-df91-493d-a575-be1ce56a34e0]
keycloak_custom_identity_provider_mapper.google_email: Refreshing state... [id=ab2117f2-dcbf-4409-a7b7-c7354317e6cc]
keycloak_custom_identity_provider_mapper.google_id: Refreshing state... [id=eda09ecd-d9ce-4ab0-a585-8f7d45dff7de]
keycloak_ldap_user_attribute_mapper.cmu_ldap_full_name: Refreshing state... [id=3246c4a5-14c9-444d-ba7d-ab2fa110c38d]
keycloak_ldap_user_attribute_mapper.cmu_ldap_username: Refreshing state... [id=4277dde1-b06e-42ff-acf8-5537604cb505]
keycloak_ldap_user_attribute_mapper.cmu_ldap_creation_date: Refreshing state... [id=e271c3e5-024c-441d-8662-00aff6f95f60]
keycloak_ldap_user_attribute_mapper.cmu_ldap_primary_affiliation: Refreshing state... [id=68cb7c40-51a4-4b5f-b520-617ae560163b]
keycloak_ldap_user_attribute_mapper.cmu_ldap_colleges: Refreshing state... [id=0ad2e74c-edb9-48c8-a7c7-3958d49ca802]
keycloak_ldap_user_attribute_mapper.cmu_ldap_email: Refreshing state... [id=409b11eb-37ae-4943-9983-7613b0bf392f]
keycloak_ldap_user_attribute_mapper.cmu_ldap_status: Refreshing state... [id=c4907832-a07a-4c5c-9a36-852b13f90cf6]
keycloak_ldap_user_attribute_mapper.cmu_ldap_modify_date: Refreshing state... [id=5618310c-00e4-4bec-9e04-3975357268ae]
keycloak_ldap_user_attribute_mapper.cmu_ldap_departments: Refreshing state... [id=da295d4b-3ee1-41b2-a9cb-4364c308c4fc]
keycloak_ldap_user_attribute_mapper.cmu_ldap_class: Refreshing state... [id=2f7671ad-081b-497a-b868-e48ba2e1d651]
keycloak_ldap_user_attribute_mapper.cmu_ldap_orcid: Refreshing state... [id=66b0d533-9f67-4b17-8bce-d056c3196377]
keycloak_ldap_user_attribute_mapper.cmu_ldap_affiliations: Refreshing state... [id=d5051889-ed12-4307-ae20-6cb808f988d1]
keycloak_ldap_user_attribute_mapper.cmu_ldap_level: Refreshing state... [id=981dc6b9-9957-48d2-94f4-c9e8182af115]
keycloak_ldap_user_attribute_mapper.cmu_ldap_first_name: Refreshing state... [id=5545f837-8bb1-4435-8797-a780dfd3c290]
keycloak_ldap_user_attribute_mapper.cmu_ldap_middle_name: Refreshing state... [id=73050ab4-9a3a-43cd-be03-6eaf2c891113]
keycloak_ldap_custom_mapper.cmu_ldap_kerberos_principal: Refreshing state... [id=5f10a23b-84b2-4441-ac93-8042dd701e29]
keycloak_ldap_user_attribute_mapper.cmu_ldap_last_name: Refreshing state... [id=1bdeb17a-f3b5-4d20-9405-f18950582ec9]
keycloak_ldap_user_attribute_mapper.cmu_ldap_full_email: Refreshing state... [id=267b1bc1-9714-46d5-85c0-e3b9a120b4da]
keycloak_ldap_user_attribute_mapper.cmu_ldap_display_name: Refreshing state... [id=ffc86fab-f094-4d62-83a8-9aeffb3b6784]
keycloak_ldap_msad_user_account_control_mapper.cmu_ldap_msad: Refreshing state... [id=59e25378-3850-47d9-bfa3-18aec5d2bef3]
data.cloudflare_zones.all: Read complete after 2s
cloudflare_dns_record.this["idp"]: Refreshing state... [id=76512b10636c34a8230d5618d365d6bc]

No changes. Your infrastructure matches the configuration.
╷
│ Warning: Deprecated Resource
│ 
│   with data.vault_kv_secret_v2.forgejo_idp,
│   on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp:
│   15:       },
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
│ 
│ (and 5 more similar warnings elsewhere)
╵
╷
│ Warning: Value derived from a deprecated source
│ 
│   with keycloak_ldap_user_federation.cmu,
│   on config.tf.json line 423, in resource.keycloak_ldap_user_federation.cmu:
│  423:         "vendor": "AD"
│ 
│ This value is derived from data.vault_kv_secret_v2.keycloak_ldap, which is
│ deprecated with the following message:
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
╵
╷
│ Warning: Value derived from a deprecated source
│ 
│   with keycloak_oidc_google_identity_provider.google,
│   on config.tf.json line 437, in resource.keycloak_oidc_google_identity_provider.google:
│  437:       }
│ 
│ This value is derived from data.vault_kv_secret_v2.keycloak_idp, which is
│ deprecated with the following message:
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
╵
╷
│ Warning: Value derived from a deprecated source
│ 
│   with keycloak_oidc_identity_provider.cmu_git,
│   on config.tf.json line 490, in resource.keycloak_oidc_identity_provider.cmu_git:
│  490:         "validate_signature": true
│ 
│ This value is derived from data.vault_kv_secret_v2.forgejo_idp, which is
│ deprecated with the following message:
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
╵

• ▶️ To apply this plan, comment:

  atlantis apply -p keycloak
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p keycloak
  

No changes. Your infrastructure matches the configuration.

---

13. project: kennel dir: . workspace: kennel

Show Output

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/0cb729ebf55dd091fac47575a867afa3c2b642db1d8bb945df61e748eabb1f63.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.27.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
vault_policy.kennel: Refreshing state... [id=kennel]
vault_approle_auth_backend_role.kennel: Refreshing state... [id=auth/approle/role/kennel]
data.keycloak_realm.scottylabs: Reading...
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["*"]: Refreshing state... [id=2d4b06ae1c39a5d196a27114e07c97e9]
cloudflare_dns_record.this["s3.kennel"]: Refreshing state... [id=d3acfc0e5ca45e0704c40d9e3fa2e60f]
cloudflare_dns_record.this["kennel"]: Refreshing state... [id=a34066db99519085f24a01cebcb25d69]

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p kennel
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p kennel
  

No changes. Your infrastructure matches the configuration.

---

14. project: hosts dir: . workspace: hosts

Show Output

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/0cb729ebf55dd091fac47575a867afa3c2b642db1d8bb945df61e748eabb1f63.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.27.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_zone_setting.always_use_https["5ec9401ebede43c78ad0167fefd3b862"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["a3c2419a7e47cdc909022c5815310013"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["c304ee4431d1d2c0313343aff8ffc338"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["9746fc8415923e40c5961ad58708e7f6"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["03d47c74036171bb4a0ad2679adf7ca5"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["706d92947e0941effeffd392637f97a2"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["78a8413b3e73553f7def8cefe1bdc386"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["eacdf87531ae2114049a9585ab73ef9d"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["98d2138c49ff1067e6fc6146febadcca"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["d8546107eab7e3bf8d413759c28b66c2"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["3b8197fed31cd2c5f52b2bbbe8b1fa0f"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["5c2e7faf46bf72319da6cdffadca7f43"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["ab365d7cec88f972e0b26bf59afd174f"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["55c7eec3f2a44b6b943962682d1d1953"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["dfe11e930ca4ef3d94cd9f79072315cd"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["a0686a6fe9f1e181d0c1dcdf9c293a9b"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["4585d8c6e8c50f8e8450c220783d6cc3"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["2bf8696c7e2fdc56f9b9e98443f001cc"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["9ae67b02fb7f5a546a8fd18527115ea5"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["2d4a1424a61322658b5e478b6f563e26"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["acfb686acc0532474d7f379317afb648"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["6a38c25604c09abe30baff7e2176a673"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["dbedf6cff671263c0d6f69b482895ee4"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["b485862979e222b68b5980cc50e8c63b"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["50f297e4046f66a46bcb445f9b92f2c3"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["c46bbc75077117690939c20f203a3c00"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["90331dc9edd007e59c828faa3b8d73a9"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["97416783adc55489c6f601bbfaa48936"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["261d3e0e93bb02ae1e6f31c7b09c6441"]: Refreshing state... [id=always_use_https]
cloudflare_dns_record.this["deploy-01"]: Refreshing state... [id=bcb794198cc3e1ad25e3707e3af7fd1d]
cloudflare_dns_record.this["infra-02"]: Refreshing state... [id=1856c054b772a4ac62e0f53625163997]
cloudflare_dns_record.this["signage-01"]: Refreshing state... [id=a80079e44697aebac2cbda4ab85a79ee]
cloudflare_dns_record.this["snoopy"]: Refreshing state... [id=7f849c841bba1c0d46009308acaf7f55]
cloudflare_dns_record.this["infra-01"]: Refreshing state... [id=30f50d5655d03d54b472480be1476c1c]

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p hosts
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p hosts
  

No changes. Your infrastructure matches the configuration.

---

15. project: webhook dir: . workspace: webhook

Show Output

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.27.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["webhooks"]: Refreshing state... [id=0ec7b1a8c64ceb6e83ded9a5842a1198]

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p webhook
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p webhook
  

No changes. Your infrastructure matches the configuration.

---

16. project: vaultwarden dir: . workspace: vaultwarden

Show Output

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/0cb729ebf55dd091fac47575a867afa3c2b642db1d8bb945df61e748eabb1f63.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.27.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Read complete after 0s
cloudflare_dns_record.this["vault"]: Refreshing state... [id=7828e0eeb9e7f251c797f565828a47f6]

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p vaultwarden
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p vaultwarden
  

No changes. Your infrastructure matches the configuration.

---

17. project: headscale dir: . workspace: headscale

Show Output

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/0cb729ebf55dd091fac47575a867afa3c2b642db1d8bb945df61e748eabb1f63.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.27.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.headplane_cookie: Refreshing state... [id=none]
vault_kv_secret_v2.headplane_cookie: Refreshing state... [id=secret/data/infra/headplane-cookie]
data.keycloak_realm.scottylabs: Reading...
data.cloudflare_zones.all: Reading...
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["headplane"]: Refreshing state... [id=9139cfa1f058db85d837defe0460fd20]
cloudflare_dns_record.this["headscale"]: Refreshing state... [id=4207dabef0c8dc1972f9d5aa1cd17a00]
data.keycloak_realm.scottylabs: Read complete after 1s [id=scottylabs]
keycloak_openid_client.headscale: Refreshing state... [id=f2875c14-dfff-4fd4-b60b-4d1e066aaeb8]
keycloak_openid_client.headplane: Refreshing state... [id=40d2dbf9-409b-4edc-974c-85d5e939efac]
keycloak_openid_group_membership_protocol_mapper.headplane_groups: Refreshing state... [id=fd683ca7-ed77-44f1-b3cc-47241ccb6fb7]
vault_kv_secret_v2.headplane_oidc: Refreshing state... [id=secret/data/infra/headplane-oidc]
keycloak_openid_group_membership_protocol_mapper.headscale_groups: Refreshing state... [id=f091397a-9b6e-4887-9913-12fb542d7210]
vault_kv_secret_v2.headscale_oidc: Refreshing state... [id=secret/data/infra/headscale-oidc]

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p headscale
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p headscale
  

No changes. Your infrastructure matches the configuration.

---

Plan Summary

17 projects, 0 with changes, 17 with no changes, 0 failed

• ⏩ To apply all unapplied plans from this Pull Request, comment:

  atlantis apply
  

• 🚮 To delete all plans and locks from this Pull Request, comment:

  atlantis unlock
  

Ran Plan for 17 projects: 1. project: `posthog` dir: `.` workspace: `posthog` 1. project: `ricochet` dir: `.` workspace: `ricochet` 1. project: `litellm` dir: `.` workspace: `litellm` 1. project: `observability` dir: `.` workspace: `observability` 1. project: `forgejo` dir: `.` workspace: `forgejo` 1. project: `snot` dir: `.` workspace: `snot` 1. project: `governance` dir: `.` workspace: `governance` 1. project: `atlantis` dir: `.` workspace: `atlantis` 1. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin` 1. project: `matrix` dir: `.` workspace: `matrix` 1. project: `openbao` dir: `.` workspace: `openbao` 1. project: `keycloak` dir: `.` workspace: `keycloak` 1. project: `kennel` dir: `.` workspace: `kennel` 1. project: `hosts` dir: `.` workspace: `hosts` 1. project: `webhook` dir: `.` workspace: `webhook` 1. project: `vaultwarden` dir: `.` workspace: `vaultwarden` 1. project: `headscale` dir: `.` workspace: `headscale` --- ### 1. project: `posthog` dir: `.` workspace: `posthog` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it Initializing the backend... Initializing provider plugins... - Reusing previous version of posthog/posthog from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed posthog/posthog v1.0.24 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.27.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... posthog_proxy_record.v: Refreshing state... [id=019cbbe2-8cae-0000-72a0-b7884cc7ec9e] data.cloudflare_zones.all: Read complete after 2s data.keycloak_realm.scottylabs: Reading... cloudflare_dns_record.this["v"]: Refreshing state... [id=a34d75a85d3128693767b2db9b7f233e] data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p posthog ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fposthog%252Fposthog) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p posthog ``` No changes. Your infrastructure matches the configuration. --- ### 2. project: `ricochet` dir: `.` workspace: `ricochet` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it Initializing the backend... Initializing provider plugins... - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.27.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Reading... data.cloudflare_zones.all: Read complete after 2s cloudflare_dns_record.this["oauth"]: Refreshing state... [id=346fac8950e4873a27d5cfb72104783d] No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p ricochet ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fricochet%252Fricochet) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p ricochet ``` No changes. Your infrastructure matches the configuration. --- ### 3. project: `litellm` dir: `.` workspace: `litellm` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it Initializing the backend... Initializing provider plugins... - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.27.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.litellm_master_key: Refreshing state... [id=none] random_password.litellm_salt_key: Refreshing state... [id=none] random_password.cli_proxy_api_key: Refreshing state... [id=none] vault_kv_secret_v2.litellm_master_key: Refreshing state... [id=secret/data/infra/litellm-master-key] vault_kv_secret_v2.cli_proxy_api_key: Refreshing state... [id=secret/data/infra/cli-proxy-api-key] vault_kv_secret_v2.litellm_salt_key: Refreshing state... [id=secret/data/infra/litellm-salt-key] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.litellm: Refreshing state... [id=4ee5ecdd-c370-4a52-93ae-744332e0a509] data.cloudflare_zones.all: Reading... keycloak_openid_group_membership_protocol_mapper.litellm_groups: Refreshing state... [id=b2e932af-b3e8-4cac-a6ea-027c1022a22f] vault_kv_secret_v2.litellm_oidc: Refreshing state... [id=secret/data/infra/litellm-oidc] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["litellm"]: Refreshing state... [id=0fa6e5399aa6a69d978d6d425ca14f44] No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p litellm ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Flitellm%252Flitellm) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p litellm ``` No changes. Your infrastructure matches the configuration. --- ### 4. project: `observability` dir: `.` workspace: `observability` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.27.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.grafana_secret_key: Refreshing state... [id=none] vault_kv_secret_v2.grafana_secret_key: Refreshing state... [id=secret/data/infra/grafana-secret-key] data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... garage_key.loki: Refreshing state... [id=GKeed8ed294debe12a38bbd470] garage_key.tempo: Refreshing state... [id=GK9769dcb3b38a1ae26ac62b3c] garage_bucket.loki_chunks: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3] data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] garage_bucket.tempo_traces: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c] keycloak_openid_client.grafana: Refreshing state... [id=527e25bc-77c3-43d5-ac28-32aa2f21fa9c] vault_kv_secret_v2.loki_s3: Refreshing state... [id=secret/data/infra/loki-s3] garage_bucket_permission.loki: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3/GKeed8ed294debe12a38bbd470] vault_kv_secret_v2.tempo_s3: Refreshing state... [id=secret/data/infra/tempo-s3] garage_bucket_permission.tempo: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c/GK9769dcb3b38a1ae26ac62b3c] vault_kv_secret_v2.grafana_oidc: Refreshing state... [id=secret/data/infra/grafana-oidc] keycloak_openid_group_membership_protocol_mapper.grafana_groups: Refreshing state... [id=5c54e939-7a03-4857-93f5-437ca25e206e] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["uptime"]: Refreshing state... [id=0909f2bd8ade5d54a53b58a2a3fef540] cloudflare_dns_record.this["grafana"]: Refreshing state... [id=9924f9e66892a5aeafe09ed0128a65a0] No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p observability ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fobservability%252Fobservability) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p observability ``` No changes. Your infrastructure matches the configuration. --- ### 5. project: `forgejo` dir: `.` workspace: `forgejo` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/0cb729ebf55dd091fac47575a867afa3c2b642db1d8bb945df61e748eabb1f63.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.27.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ garage_key.forgejo: Refreshing state... [id=GKea9810d648000e3e3b8df725] garage_bucket.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960] vault_kv_secret_v2.forgejo_storage: Refreshing state... [id=secret/data/infra/forgejo-storage] garage_bucket_permission.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960/GKea9810d648000e3e3b8df725] data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 1s [id=scottylabs] keycloak_openid_client.forgejo: Refreshing state... [id=110b9b02-18e1-4bac-b5ce-936bbfbc83d6] vault_kv_secret_v2.forgejo_oidc: Refreshing state... [id=secret/data/infra/forgejo-oidc] keycloak_openid_group_membership_protocol_mapper.forgejo_groups: Refreshing state... [id=72c7154f-372d-4a39-97c0-6516a88d6198] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["git"]: Refreshing state... [id=f0fa6f4acf6bf381474c1a9304225f68] No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p forgejo ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fforgejo%252Fforgejo) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p forgejo ``` No changes. Your infrastructure matches the configuration. --- ### 6. project: `snot` dir: `.` workspace: `snot` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/0cb729ebf55dd091fac47575a867afa3c2b642db1d8bb945df61e748eabb1f63.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.27.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["knot"]: Refreshing state... [id=264276915648465296ad9d24fb70a29b] No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p snot ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fsnot%252Fsnot) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p snot ``` No changes. Your infrastructure matches the configuration. --- ### 7. project: `governance` dir: `.` workspace: `governance` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/0cb729ebf55dd091fac47575a867afa3c2b642db1d8bb945df61e748eabb1f63.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.27.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.keycloak_openid_client.realm_management: Reading... keycloak_openid_client.governance_cli: Refreshing state... [id=f19d0308-19a8-4fc4-aa5f-f909fc38c5fe] data.keycloak_openid_client.realm_management: Read complete after 0s [id=a0a15f13-b554-4bed-9fb2-3e63e0301278] vault_kv_secret_v2.governance_ci_bot_token: Refreshing state... [id=secret/data/secretspec/governance/ci/BOT_TOKEN] vault_policy.governance: Refreshing state... [id=governance] vault_approle_auth_backend_role.governance: Refreshing state... [id=auth/approle/role/governance] data.cloudflare_zones.all: Reading... vault_kv_secret_v2.governance_ci_keycloak_client_secret: Refreshing state... [id=secret/data/secretspec/governance/ci/KEYCLOAK_CLIENT_SECRET] vault_kv_secret_v2.governance_ci_keycloak_client_id: Refreshing state... [id=secret/data/secretspec/governance/ci/KEYCLOAK_CLIENT_ID] keycloak_openid_client_service_account_role.governance_cli_realm_management["manage-clients"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/366f6242-2ce3-4be8-b861-3561e3c4b865] keycloak_openid_client_service_account_role.governance_cli_realm_management["view-users"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/65f4c673-fc55-430c-b4b6-fd14ed151966] keycloak_openid_client_service_account_role.governance_cli_realm_management["query-clients"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/16d40468-7ba1-4f17-ba0d-0741880f291a] keycloak_openid_client_service_account_role.governance_cli_realm_management["manage-users"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/eb96eb71-82eb-4317-b8f5-326472e11484] data.cloudflare_zones.all: Read complete after 1s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p governance ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fgovernance%252Fgovernance) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p governance ``` No changes. Your infrastructure matches the configuration. --- ### 8. project: `atlantis` dir: `.` workspace: `atlantis` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it Initializing the backend... Initializing provider plugins... - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of svalabs/forgejo from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed svalabs/forgejo v1.6.1 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.27.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.atlantis_webhook_secret: Refreshing state... [id=none] vault_kv_secret_v2.atlantis_webhook: Refreshing state... [id=secret/data/infra/atlantis] data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.cloudflare_zones.all: Read complete after 1s data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.forgejo_repository.infrastructure: Reading... data.forgejo_repository.governance: Reading... data.forgejo_repository.infrastructure: Read complete after 0s [name=infrastructure] data.forgejo_repository.governance: Read complete after 0s [name=governance] forgejo_repository_webhook.infrastructure: Refreshing state... forgejo_repository_webhook.governance: Refreshing state... cloudflare_dns_record.this["atlantis"]: Refreshing state... [id=d0419d10a0c0bb715bcbadc7a1c73cbb] No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p atlantis ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fatlantis%252Fatlantis) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p atlantis ``` No changes. Your infrastructure matches the configuration. --- ### 9. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/0cb729ebf55dd091fac47575a867afa3c2b642db1d8bb945df61e748eabb1f63.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.27.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.garage_webadmin_jwt: Refreshing state... [id=none] vault_kv_secret_v2.garage_webadmin_jwt: Refreshing state... [id=secret/data/infra/garage-webadmin-jwt] data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.garage_webadmin: Refreshing state... [id=a48c9f66-cde3-463d-970c-b2d7de716185] keycloak_openid_group_membership_protocol_mapper.garage_webadmin_groups: Refreshing state... [id=a86e928b-6c7a-4081-a291-637e752fbabf] vault_kv_secret_v2.garage_webadmin_oidc: Refreshing state... [id=secret/data/infra/garage-webadmin-oidc] data.cloudflare_zones.all: Read complete after 0s cloudflare_dns_record.this["garage"]: Refreshing state... [id=4054146ceff1515773704f89136b25f1] No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p garage-webadmin ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fgarage-webadmin%252Fgarage-webadmin) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p garage-webadmin ``` No changes. Your infrastructure matches the configuration. --- ### 10. project: `matrix` dir: `.` workspace: `matrix` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/0cb729ebf55dd091fac47575a867afa3c2b642db1d8bb945df61e748eabb1f63.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.27.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["matrix"]: Refreshing state... [id=c37d2e1a4edf950b4af4544574c159a8] cloudflare_dns_record.this["@"]: Refreshing state... [id=63ff3b423afd444f8bd31201db232ada] No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p matrix ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fmatrix%252Fmatrix) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p matrix ``` No changes. Your infrastructure matches the configuration. --- ### 11. project: `openbao` dir: `.` workspace: `openbao` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/0cb729ebf55dd091fac47575a867afa3c2b642db1d8bb945df61e748eabb1f63.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.27.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.openbao: Refreshing state... [id=86926066-77c5-458e-be5a-cb585b75c818] vault_policy.devops: Refreshing state... [id=devops] vault_mount.kv: Refreshing state... [id=secret] vault_policy.infra: Refreshing state... [id=infra] vault_policy.ci: Refreshing state... [id=ci] vault_policy.shared_read: Refreshing state... [id=shared-read] vault_auth_backend.approle: Refreshing state... [id=approle] vault_jwt_auth_backend.forgejo: Refreshing state... [id=jwt] vault_identity_group.all_members: Refreshing state... [id=17a94032-1dfa-8c66-af1f-ac3942f8d13f] vault_approle_auth_backend_role.host["signage-01"]: Refreshing state... [id=auth/approle/role/signage-01] vault_approle_auth_backend_role.host["snoopy"]: Refreshing state... [id=auth/approle/role/snoopy] vault_identity_group.devops: Refreshing state... [id=6922ccb6-70c2-acef-0580-49477441e3ff] vault_approle_auth_backend_role.host["infra-01"]: Refreshing state... [id=auth/approle/role/infra-01] vault_approle_auth_backend_role.host["deploy-01"]: Refreshing state... [id=auth/approle/role/deploy-01] vault_kv_secret_v2.cachix: Refreshing state... [id=secret/data/shared/cachix] vault_jwt_auth_backend_role.ci: Refreshing state... [id=auth/jwt/role/ci] vault_jwt_auth_backend.oidc: Refreshing state... [id=oidc] keycloak_openid_group_membership_protocol_mapper.openbao_groups: Refreshing state... [id=cafd878e-dbc6-4376-95de-f09c2e5b9870] vault_identity_group_alias.devops: Refreshing state... [id=f7f8c2b9-125e-5c92-efda-361e93cd2d2a] vault_identity_group_alias.all_members: Refreshing state... [id=3371c9f2-3d4b-eafe-20e5-f2bfed63fdb9] vault_jwt_auth_backend_role.default: Refreshing state... [id=auth/oidc/role/default] data.cloudflare_zones.all: Reading... data.cloudflare_zones.all: Read complete after 0s cloudflare_dns_record.this["secrets"]: Refreshing state... [id=c24ad8899e7a3b573f1d2d7b95711926] No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p openbao ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fopenbao%252Fopenbao) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p openbao ``` No changes. Your infrastructure matches the configuration. --- ### 12. project: `keycloak` dir: `.` workspace: `keycloak` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/0cb729ebf55dd091fac47575a867afa3c2b642db1d8bb945df61e748eabb1f63.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.27.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.keycloak_realm.scottylabs: Reading... data.vault_kv_secret_v2.forgejo_idp: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.vault_kv_secret_v2.keycloak_ldap: Reading... data.vault_kv_secret_v2.keycloak_idp: Reading... data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp] data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp] keycloak_oidc_identity_provider.cmu: Refreshing state... [id=cmu] keycloak_oidc_google_identity_provider.google: Refreshing state... [id=google] data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap] keycloak_saml_identity_provider.cmu_saml: Refreshing state... [id=cmu-saml] keycloak_oidc_identity_provider.slack: Refreshing state... [id=slack] keycloak_oidc_identity_provider.cmu_git: Refreshing state... [id=cmu-dev] keycloak_ldap_user_federation.cmu: Refreshing state... [id=TtPPdhQJRUSFFwr_nJ2gcA] keycloak_realm_user_profile.scottylabs: Refreshing state... [id=scottylabs] data.cloudflare_zones.all: Reading... keycloak_custom_identity_provider_mapper.cmu_username: Refreshing state... [id=65d1857d-19e5-4db5-940c-7751b770b4ac] keycloak_custom_identity_provider_mapper.cmudev_id: Refreshing state... [id=5944bfd3-9704-482e-ac25-c41a40351cd7] keycloak_custom_identity_provider_mapper.cmudev_email: Refreshing state... [id=2763e7d7-f102-479e-a560-41704bcf5e4b] keycloak_custom_identity_provider_mapper.cmudev_username: Refreshing state... [id=8f04fb48-8434-43d6-accd-5b3a1e48e9b2] keycloak_custom_identity_provider_mapper.cmudev_name: Refreshing state... [id=17703dd7-f88f-4d6b-88f0-e7561e796c8f] keycloak_custom_identity_provider_mapper.slack_name: Refreshing state... [id=2e4d5410-12d5-46b3-b3d4-7f5b17ee0556] keycloak_custom_identity_provider_mapper.slack_id: Refreshing state... [id=7d6f3768-e0a7-41c2-b252-95d2709c65b7] keycloak_custom_identity_provider_mapper.slack_email: Refreshing state... [id=ea769c6c-b497-49ec-9a4d-8ba28005e62d] keycloak_custom_identity_provider_mapper.cmu_saml_username: Refreshing state... [id=32fed5ec-b30e-4b69-90a3-64c58f592ded] keycloak_custom_identity_provider_mapper.google_name: Refreshing state... [id=9d5c678f-df91-493d-a575-be1ce56a34e0] keycloak_custom_identity_provider_mapper.google_email: Refreshing state... [id=ab2117f2-dcbf-4409-a7b7-c7354317e6cc] keycloak_custom_identity_provider_mapper.google_id: Refreshing state... [id=eda09ecd-d9ce-4ab0-a585-8f7d45dff7de] keycloak_ldap_user_attribute_mapper.cmu_ldap_full_name: Refreshing state... [id=3246c4a5-14c9-444d-ba7d-ab2fa110c38d] keycloak_ldap_user_attribute_mapper.cmu_ldap_username: Refreshing state... [id=4277dde1-b06e-42ff-acf8-5537604cb505] keycloak_ldap_user_attribute_mapper.cmu_ldap_creation_date: Refreshing state... [id=e271c3e5-024c-441d-8662-00aff6f95f60] keycloak_ldap_user_attribute_mapper.cmu_ldap_primary_affiliation: Refreshing state... [id=68cb7c40-51a4-4b5f-b520-617ae560163b] keycloak_ldap_user_attribute_mapper.cmu_ldap_colleges: Refreshing state... [id=0ad2e74c-edb9-48c8-a7c7-3958d49ca802] keycloak_ldap_user_attribute_mapper.cmu_ldap_email: Refreshing state... [id=409b11eb-37ae-4943-9983-7613b0bf392f] keycloak_ldap_user_attribute_mapper.cmu_ldap_status: Refreshing state... [id=c4907832-a07a-4c5c-9a36-852b13f90cf6] keycloak_ldap_user_attribute_mapper.cmu_ldap_modify_date: Refreshing state... [id=5618310c-00e4-4bec-9e04-3975357268ae] keycloak_ldap_user_attribute_mapper.cmu_ldap_departments: Refreshing state... [id=da295d4b-3ee1-41b2-a9cb-4364c308c4fc] keycloak_ldap_user_attribute_mapper.cmu_ldap_class: Refreshing state... [id=2f7671ad-081b-497a-b868-e48ba2e1d651] keycloak_ldap_user_attribute_mapper.cmu_ldap_orcid: Refreshing state... [id=66b0d533-9f67-4b17-8bce-d056c3196377] keycloak_ldap_user_attribute_mapper.cmu_ldap_affiliations: Refreshing state... [id=d5051889-ed12-4307-ae20-6cb808f988d1] keycloak_ldap_user_attribute_mapper.cmu_ldap_level: Refreshing state... [id=981dc6b9-9957-48d2-94f4-c9e8182af115] keycloak_ldap_user_attribute_mapper.cmu_ldap_first_name: Refreshing state... [id=5545f837-8bb1-4435-8797-a780dfd3c290] keycloak_ldap_user_attribute_mapper.cmu_ldap_middle_name: Refreshing state... [id=73050ab4-9a3a-43cd-be03-6eaf2c891113] keycloak_ldap_custom_mapper.cmu_ldap_kerberos_principal: Refreshing state... [id=5f10a23b-84b2-4441-ac93-8042dd701e29] keycloak_ldap_user_attribute_mapper.cmu_ldap_last_name: Refreshing state... [id=1bdeb17a-f3b5-4d20-9405-f18950582ec9] keycloak_ldap_user_attribute_mapper.cmu_ldap_full_email: Refreshing state... [id=267b1bc1-9714-46d5-85c0-e3b9a120b4da] keycloak_ldap_user_attribute_mapper.cmu_ldap_display_name: Refreshing state... [id=ffc86fab-f094-4d62-83a8-9aeffb3b6784] keycloak_ldap_msad_user_account_control_mapper.cmu_ldap_msad: Refreshing state... [id=59e25378-3850-47d9-bfa3-18aec5d2bef3] data.cloudflare_zones.all: Read complete after 2s cloudflare_dns_record.this["idp"]: Refreshing state... [id=76512b10636c34a8230d5618d365d6bc] No changes. Your infrastructure matches the configuration. ╷ │ Warning: Deprecated Resource │ │ with data.vault_kv_secret_v2.forgejo_idp, │ on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp: │ 15: }, │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead │ │ (and 5 more similar warnings elsewhere) ╵ ╷ │ Warning: Value derived from a deprecated source │ │ with keycloak_ldap_user_federation.cmu, │ on config.tf.json line 423, in resource.keycloak_ldap_user_federation.cmu: │ 423: "vendor": "AD" │ │ This value is derived from data.vault_kv_secret_v2.keycloak_ldap, which is │ deprecated with the following message: │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead ╵ ╷ │ Warning: Value derived from a deprecated source │ │ with keycloak_oidc_google_identity_provider.google, │ on config.tf.json line 437, in resource.keycloak_oidc_google_identity_provider.google: │ 437: } │ │ This value is derived from data.vault_kv_secret_v2.keycloak_idp, which is │ deprecated with the following message: │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead ╵ ╷ │ Warning: Value derived from a deprecated source │ │ with keycloak_oidc_identity_provider.cmu_git, │ on config.tf.json line 490, in resource.keycloak_oidc_identity_provider.cmu_git: │ 490: "validate_signature": true │ │ This value is derived from data.vault_kv_secret_v2.forgejo_idp, which is │ deprecated with the following message: │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead ╵ ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p keycloak ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fkeycloak%252Fkeycloak) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p keycloak ``` No changes. Your infrastructure matches the configuration. --- ### 13. project: `kennel` dir: `.` workspace: `kennel` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/0cb729ebf55dd091fac47575a867afa3c2b642db1d8bb945df61e748eabb1f63.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.27.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ vault_policy.kennel: Refreshing state... [id=kennel] vault_approle_auth_backend_role.kennel: Refreshing state... [id=auth/approle/role/kennel] data.keycloak_realm.scottylabs: Reading... data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["*"]: Refreshing state... [id=2d4b06ae1c39a5d196a27114e07c97e9] cloudflare_dns_record.this["s3.kennel"]: Refreshing state... [id=d3acfc0e5ca45e0704c40d9e3fa2e60f] cloudflare_dns_record.this["kennel"]: Refreshing state... [id=a34066db99519085f24a01cebcb25d69] No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p kennel ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fkennel%252Fkennel) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p kennel ``` No changes. Your infrastructure matches the configuration. --- ### 14. project: `hosts` dir: `.` workspace: `hosts` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/0cb729ebf55dd091fac47575a867afa3c2b642db1d8bb945df61e748eabb1f63.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.27.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Read complete after 1s cloudflare_zone_setting.always_use_https["5ec9401ebede43c78ad0167fefd3b862"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["a3c2419a7e47cdc909022c5815310013"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["c304ee4431d1d2c0313343aff8ffc338"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["9746fc8415923e40c5961ad58708e7f6"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["03d47c74036171bb4a0ad2679adf7ca5"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["706d92947e0941effeffd392637f97a2"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["78a8413b3e73553f7def8cefe1bdc386"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["eacdf87531ae2114049a9585ab73ef9d"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["98d2138c49ff1067e6fc6146febadcca"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["d8546107eab7e3bf8d413759c28b66c2"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["3b8197fed31cd2c5f52b2bbbe8b1fa0f"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["5c2e7faf46bf72319da6cdffadca7f43"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["ab365d7cec88f972e0b26bf59afd174f"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["55c7eec3f2a44b6b943962682d1d1953"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["dfe11e930ca4ef3d94cd9f79072315cd"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["a0686a6fe9f1e181d0c1dcdf9c293a9b"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["4585d8c6e8c50f8e8450c220783d6cc3"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["2bf8696c7e2fdc56f9b9e98443f001cc"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["9ae67b02fb7f5a546a8fd18527115ea5"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["2d4a1424a61322658b5e478b6f563e26"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["acfb686acc0532474d7f379317afb648"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["6a38c25604c09abe30baff7e2176a673"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["dbedf6cff671263c0d6f69b482895ee4"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["b485862979e222b68b5980cc50e8c63b"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["50f297e4046f66a46bcb445f9b92f2c3"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["c46bbc75077117690939c20f203a3c00"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["90331dc9edd007e59c828faa3b8d73a9"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["97416783adc55489c6f601bbfaa48936"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["261d3e0e93bb02ae1e6f31c7b09c6441"]: Refreshing state... [id=always_use_https] cloudflare_dns_record.this["deploy-01"]: Refreshing state... [id=bcb794198cc3e1ad25e3707e3af7fd1d] cloudflare_dns_record.this["infra-02"]: Refreshing state... [id=1856c054b772a4ac62e0f53625163997] cloudflare_dns_record.this["signage-01"]: Refreshing state... [id=a80079e44697aebac2cbda4ab85a79ee] cloudflare_dns_record.this["snoopy"]: Refreshing state... [id=7f849c841bba1c0d46009308acaf7f55] cloudflare_dns_record.this["infra-01"]: Refreshing state... [id=30f50d5655d03d54b472480be1476c1c] No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p hosts ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fhosts%252Fhosts) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p hosts ``` No changes. Your infrastructure matches the configuration. --- ### 15. project: `webhook` dir: `.` workspace: `webhook` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.27.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["webhooks"]: Refreshing state... [id=0ec7b1a8c64ceb6e83ded9a5842a1198] No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p webhook ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fwebhook%252Fwebhook) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p webhook ``` No changes. Your infrastructure matches the configuration. --- ### 16. project: `vaultwarden` dir: `.` workspace: `vaultwarden` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/0cb729ebf55dd091fac47575a867afa3c2b642db1d8bb945df61e748eabb1f63.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.27.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Read complete after 0s cloudflare_dns_record.this["vault"]: Refreshing state... [id=7828e0eeb9e7f251c797f565828a47f6] No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p vaultwarden ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fvaultwarden%252Fvaultwarden) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p vaultwarden ``` No changes. Your infrastructure matches the configuration. --- ### 17. project: `headscale` dir: `.` workspace: `headscale` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/0cb729ebf55dd091fac47575a867afa3c2b642db1d8bb945df61e748eabb1f63.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.27.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.headplane_cookie: Refreshing state... [id=none] vault_kv_secret_v2.headplane_cookie: Refreshing state... [id=secret/data/infra/headplane-cookie] data.keycloak_realm.scottylabs: Reading... data.cloudflare_zones.all: Reading... data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["headplane"]: Refreshing state... [id=9139cfa1f058db85d837defe0460fd20] cloudflare_dns_record.this["headscale"]: Refreshing state... [id=4207dabef0c8dc1972f9d5aa1cd17a00] data.keycloak_realm.scottylabs: Read complete after 1s [id=scottylabs] keycloak_openid_client.headscale: Refreshing state... [id=f2875c14-dfff-4fd4-b60b-4d1e066aaeb8] keycloak_openid_client.headplane: Refreshing state... [id=40d2dbf9-409b-4edc-974c-85d5e939efac] keycloak_openid_group_membership_protocol_mapper.headplane_groups: Refreshing state... [id=fd683ca7-ed77-44f1-b3cc-47241ccb6fb7] vault_kv_secret_v2.headplane_oidc: Refreshing state... [id=secret/data/infra/headplane-oidc] keycloak_openid_group_membership_protocol_mapper.headscale_groups: Refreshing state... [id=f091397a-9b6e-4887-9913-12fb542d7210] vault_kv_secret_v2.headscale_oidc: Refreshing state... [id=secret/data/infra/headscale-oidc] No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p headscale ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fheadscale%252Fheadscale) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p headscale ``` No changes. Your infrastructure matches the configuration. --- ### Plan Summary 17 projects, 0 with changes, 17 with no changes, 0 failed * :fast_forward: To **apply** all unapplied plans from this Pull Request, comment: ```shell atlantis apply ``` * :put_litter_in_its_place: To **delete** all plans and locks from this Pull Request, comment: ```shell atlantis unlock ```

anish commented 2026-10-13 05:48:44 +00:00

Author

Owner

Copy link

atlantis apply

atlantis apply

scottylabs-bot commented 2026-10-13 05:48:52 +00:00

Owner

Copy link

Ran Apply for 17 projects:

1. project: snot dir: . workspace: snot
2. project: observability dir: . workspace: observability
3. project: openbao dir: . workspace: openbao
4. project: forgejo dir: . workspace: forgejo
5. project: hosts dir: . workspace: hosts
6. project: posthog dir: . workspace: posthog
7. project: ricochet dir: . workspace: ricochet
8. project: garage-webadmin dir: . workspace: garage-webadmin
9. project: atlantis dir: . workspace: atlantis
10. project: litellm dir: . workspace: litellm
11. project: kennel dir: . workspace: kennel
12. project: matrix dir: . workspace: matrix
13. project: governance dir: . workspace: governance
14. project: headscale dir: . workspace: headscale
15. project: keycloak dir: . workspace: keycloak
16. project: vaultwarden dir: . workspace: vaultwarden
17. project: webhook dir: . workspace: webhook

---

1. project: snot dir: . workspace: snot

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

---

2. project: observability dir: . workspace: observability

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

---

3. project: openbao dir: . workspace: openbao

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

Outputs:

approle_role_ids = {
  "deploy-01" = "d63a47b8-ceb2-d59e-e8f0-659023851ae8"
  "infra-01" = "2df30359-cc03-22a6-8ebe-3eb36dfc0194"
  "signage-01" = "328a7073-0315-f7f4-5433-8d48f6092e22"
  "snoopy" = "210a166d-85f9-d8f4-3e81-9d0f994c5043"
}

---

4. project: forgejo dir: . workspace: forgejo

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

---

5. project: hosts dir: . workspace: hosts

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

---

6. project: posthog dir: . workspace: posthog

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

---

7. project: ricochet dir: . workspace: ricochet

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

---

8. project: garage-webadmin dir: . workspace: garage-webadmin

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

Outputs:

garage_webadmin_client_secret = <sensitive>

---

9. project: atlantis dir: . workspace: atlantis

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

---

10. project: litellm dir: . workspace: litellm

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

---

11. project: kennel dir: . workspace: kennel

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

Outputs:

kennel_approle_role_id = "6d684d7c-a739-cad2-58c2-9fb7d9bc48fc"

---

12. project: matrix dir: . workspace: matrix

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

---

13. project: governance dir: . workspace: governance

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

Outputs:

governance_approle_role_id = "985fa7b6-334c-4e8c-5780-46dc57798bbf"

---

14. project: headscale dir: . workspace: headscale

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

Outputs:

headplane_client_secret = <sensitive>
headscale_client_secret = <sensitive>

---

15. project: keycloak dir: . workspace: keycloak

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

---

16. project: vaultwarden dir: . workspace: vaultwarden

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

---

17. project: webhook dir: . workspace: webhook

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

---

Apply Summary

17 projects, 17 successful, 0 failed, 0 errored

Ran Apply for 17 projects: 1. project: `snot` dir: `.` workspace: `snot` 1. project: `observability` dir: `.` workspace: `observability` 1. project: `openbao` dir: `.` workspace: `openbao` 1. project: `forgejo` dir: `.` workspace: `forgejo` 1. project: `hosts` dir: `.` workspace: `hosts` 1. project: `posthog` dir: `.` workspace: `posthog` 1. project: `ricochet` dir: `.` workspace: `ricochet` 1. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin` 1. project: `atlantis` dir: `.` workspace: `atlantis` 1. project: `litellm` dir: `.` workspace: `litellm` 1. project: `kennel` dir: `.` workspace: `kennel` 1. project: `matrix` dir: `.` workspace: `matrix` 1. project: `governance` dir: `.` workspace: `governance` 1. project: `headscale` dir: `.` workspace: `headscale` 1. project: `keycloak` dir: `.` workspace: `keycloak` 1. project: `vaultwarden` dir: `.` workspace: `vaultwarden` 1. project: `webhook` dir: `.` workspace: `webhook` --- ### 1. project: `snot` dir: `.` workspace: `snot` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 2. project: `observability` dir: `.` workspace: `observability` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 3. project: `openbao` dir: `.` workspace: `openbao` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. Outputs: approle_role_ids = { "deploy-01" = "d63a47b8-ceb2-d59e-e8f0-659023851ae8" "infra-01" = "2df30359-cc03-22a6-8ebe-3eb36dfc0194" "signage-01" = "328a7073-0315-f7f4-5433-8d48f6092e22" "snoopy" = "210a166d-85f9-d8f4-3e81-9d0f994c5043" } ``` </details> --- ### 4. project: `forgejo` dir: `.` workspace: `forgejo` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 5. project: `hosts` dir: `.` workspace: `hosts` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 6. project: `posthog` dir: `.` workspace: `posthog` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 7. project: `ricochet` dir: `.` workspace: `ricochet` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 8. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. Outputs: garage_webadmin_client_secret = <sensitive> ``` </details> --- ### 9. project: `atlantis` dir: `.` workspace: `atlantis` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 10. project: `litellm` dir: `.` workspace: `litellm` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 11. project: `kennel` dir: `.` workspace: `kennel` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. Outputs: kennel_approle_role_id = "6d684d7c-a739-cad2-58c2-9fb7d9bc48fc" ``` </details> --- ### 12. project: `matrix` dir: `.` workspace: `matrix` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 13. project: `governance` dir: `.` workspace: `governance` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. Outputs: governance_approle_role_id = "985fa7b6-334c-4e8c-5780-46dc57798bbf" ``` </details> --- ### 14. project: `headscale` dir: `.` workspace: `headscale` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. Outputs: headplane_client_secret = <sensitive> headscale_client_secret = <sensitive> ``` </details> --- ### 15. project: `keycloak` dir: `.` workspace: `keycloak` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 16. project: `vaultwarden` dir: `.` workspace: `vaultwarden` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 17. project: `webhook` dir: `.` workspace: `webhook` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/n7s199gl160ci665hfi2mlhm39w9k2gn-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### Apply Summary 17 projects, 17 successful, 0 failed, 0 errored

anish merged commit b70a4eb3d8 into main 2026-10-13 05:49:56 +00:00

anish deleted branch posthog-proxy-record 2026-10-13 05:49:56 +00:00

scottylabs-bot commented 2026-10-13 05:49:57 +00:00

Owner

Copy link

Locks and plans deleted for the projects and workspaces modified in this pull request:

• dir: . workspaces: atlantis, forgejo, garage-webadmin, governance, headscale, hosts, kennel, keycloak, litellm, matrix, observability, openbao, posthog, ricochet, snot, vaultwarden, webhook

Locks and plans deleted for the projects and workspaces modified in this pull request: - dir: `.` workspaces: `atlantis`, `forgejo`, `garage-webadmin`, `governance`, `headscale`, `hosts`, `kennel`, `keycloak`, `litellm`, `matrix`, `observability`, `openbao`, `posthog`, `ricochet`, `snot`, `vaultwarden`, `webhook`

anish referenced this pull request from a commit 2026-10-13 05:49:58 +00:00

feat: manage the posthog proxy record and derive its CNAME target (#159)

anish referenced this pull request from a commit 2026-10-19 09:45:01 +00:00

feat: manage the posthog proxy record and derive its CNAME target (#159)

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

  

needs/docs

Must have documentation written

  

needs/research

Discuss the ideal implementation with the tech lead

  

needs/upstream

Needs a contribution to an upstream project

  

type/bug

Something not working as intended

  

type/external

Lives outside of code

  

type/feature

New functionality

  

type/refactor

Improving existing code

  

urgency

high

This is currently causing issues

  

urgency

immediate

This is making a project or feature unusable

  

urgency

low

This can happen whenever

  

urgency

medium

This is expected to cause issues soon

No labels

needs/docs

needs/research

needs/upstream

type/bug

type/external

type/feature

type/refactor

urgency

high

urgency

immediate

urgency

low

urgency

medium

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

2 participants

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

ScottyLabs/infrastructure!159

No description provided.