From 360cef210aacf0aa0e0102ee78c78790c0950696 Mon Sep 17 00:00:00 2001 From: Zack Date: Thu, 23 Jul 2026 17:18:36 +0100 Subject: [PATCH] feat: add zitadel base-domain 1password secrets Register CUSTOMER_ZITADEL_BASE_DOMAIN (per-env, futo account) and FUTO_ZITADEL_BASE_DOMAIN (immich tf vault) so the manual-secrets modules seed them. Each holds its zitadel instance's stable .zitadel.cloud host. Must be applied and populated with real values before the modules that consume them. --- tf/deployment/modules/shared/1password/account/secrets.tf | 1 + .../modules/shared/1password/futo-account/yucca-secrets.tf | 1 + 2 files changed, 2 insertions(+) diff --git a/tf/deployment/modules/shared/1password/account/secrets.tf b/tf/deployment/modules/shared/1password/account/secrets.tf index eddb78b87..66c9d225a 100644 --- a/tf/deployment/modules/shared/1password/account/secrets.tf +++ b/tf/deployment/modules/shared/1password/account/secrets.tf @@ -52,6 +52,7 @@ module "manual-secrets" { "IMMICH_GITHUB_OAUTH_APP_INTERNAL_FUTO_ZITADEL_CLIENT_ID", "IMMICH_GITHUB_OAUTH_APP_INTERNAL_FUTO_ZITADEL_CLIENT_SECRET", "FUTO_ZITADEL_PROFILE_JSON", + "FUTO_ZITADEL_BASE_DOMAIN", "LOOPDEDUPE_GITHUB_WEBHOOK_URL", "LOOPDEDUPE_VOYAGE_API_KEY", "1PASS_CONNECT_SERVER_CREDENTIALS_FILE", diff --git a/tf/deployment/modules/shared/1password/futo-account/yucca-secrets.tf b/tf/deployment/modules/shared/1password/futo-account/yucca-secrets.tf index a2bf67113..2bea8ef31 100644 --- a/tf/deployment/modules/shared/1password/futo-account/yucca-secrets.tf +++ b/tf/deployment/modules/shared/1password/futo-account/yucca-secrets.tf @@ -27,6 +27,7 @@ module "yucca-manual-secrets" { "1PASS_CONNECT_YUCCA_READ", "1PASS_CONNECT_YUCCA_WRITE", "CUSTOMER_ZITADEL_DOMAIN", + "CUSTOMER_ZITADEL_BASE_DOMAIN", "CUSTOMER_ZITADEL_PROFILE_JSON", "CUSTOMER_ZITADEL_SMTP_HOST", "CUSTOMER_ZITADEL_SMTP_USER",