feat(secrets): add SOPS+age encryption for .env

.env encrypted to .env.sops using shared Unraid age key. .gitignore updated to allow .env.sops while still blocking plain .env.
2026-05-15 19:28:13 +10:00
parent b8cd1b0f89
commit 5df164e9a5
3 changed files with 19 additions and 0 deletions
@@ -32,6 +32,7 @@ yarn-error.log*

 # env files (can opt-in for committing if needed)
 .env*
+!.env.sops

 # vercel
 .vercel