#!/usr/bin/env nix-shell
#!nix-shell -i bash
# shellcheck shell=bash
set -Eeuo pipefail
cd "$(dirname "${BASH_SOURCE[0]}")"

git crypt unlock
direnv allow

terraform init
PLAN_FILE="./secrets/terraform/plan-files/$(date -Iseconds)"
terraform plan  -input=false -out="${PLAN_FILE}"
terraform apply -input=false "${PLAN_FILE}"