Compare commits

..

No commits in common. "bec2e50a670107e6bf9b15a974e82c848e4558f0" and "5bcaaf7d889f90f3b7ebaf189768d99afef0108e" have entirely different histories.

View file

@ -2150,12 +2150,6 @@ disinto_secrets() {
fi fi
_secrets_ensure_sops _secrets_ensure_sops
encrypt_env_file "$vault_env_file" "$vault_enc_file" encrypt_env_file "$vault_env_file" "$vault_enc_file"
# Verify decryption works before removing plaintext
if ! sops -d "$vault_enc_file" >/dev/null 2>&1; then
echo "Error: failed to verify .env.vault.enc decryption" >&2
rm -f "$vault_enc_file"
exit 1
fi
rm -f "$vault_env_file" rm -f "$vault_env_file"
echo "Migrated: .env.vault -> .env.vault.enc (plaintext removed)" echo "Migrated: .env.vault -> .env.vault.enc (plaintext removed)"
;; ;;