tuffas

hosting hruday.me via terraform

---

Add dotenv to .envrc after other nix stuff, and store keys in .env, which is fine for a testing project.

Todos

• better secrets management
• ci
• test ci permissions with a real terraform apply (not in ci)
• can we make a lower-weight runner? ubuntu-latest is heavy and still requires ~1m for providers