ci: deploy dev infra [rebuild]

2026-03-17 01:21:29 +01:00
parent 85ae6254a0
commit 9e91a9f90c
43 changed files with 390 additions and 105 deletions
--- a/README.md
+++ b/README.md
@@ -124,6 +124,11 @@ First-time dev bootstrap:
 # after infra is green, merge normal app changes to main
 ```

+Dev secret source:
+
+- After the dev Vault bootstrap runs, dev build/deploy secrets are read from the dev Vault on the dev host.
+- The dev SSH deploy key remains an external bootstrap secret because CI needs it before it can reach the dev host.
+
 Recommended release preparation:

 ```bash