Deploy with values and SSH key from the KF console

README.md

@@ -95,6 +95,10 @@ pnpm secrets:decrypt:local   # infra/.env.local.enc → infra/.env.local
 pnpm secrets:encrypt:local   # infra/.env.local → infra/.env.local.enc (after changes)
 ```
 
+DuqDuq (`dev`) and production values are in `infra/.env.dev.enc` and `infra/.env.enc`.
+Change them with `kf secrets set <KEY> -e dev` or `-e production`. Deploys get them from
+the KF console.
+
 ### Troubleshooting
 
 **`env file infra/.env.local not found`**

infra/.env.dev.enc

@@ -44,7 +44,10 @@ OIDC_ACCOUNT_URL=ENC[AES256_GCM,data:zCsnhOwt+Qo/B9cok2bOLxZkeV+LBQLC5AF7+wsDN2H
 APP_URL=ENC[AES256_GCM,data:Ax8m3fHi9i0zvXcsdTs/Ga6ZejklNg==,iv:GH/YqXdTLONtW2z2HLiMNF4N1GxSfnfQ8e5JYTJULkE=,tag:5W7AEcA+8soQX4qa3jKvFQ==,type:str]
 SESSION_SECRET=ENC[AES256_GCM,data:PXNYlKtkiAikN0PIlfkgWu5m6Jm9e4+2yLocsvIZKPq1C3kpCOm70IQIe6Q32uJ3Cia8/7jrr1DPcQat9SunW0BD3NlEkLmPPxBG0lyxAPFxsrrjmFhd1EFXJyNN1Agu+x+VPBEsdXm1dI1tjbz84Vx8rwWL7Arpt46Sxaorv/E=,iv:n+xD41b26HyHGOsjzg0f5FD2zmrFTRWp+K/IEy/Tjds=,tag:J+M/zp5mPD21XGcN+z4Ezw==,type:str]
 UNDERLAY_API_BASE_URL=ENC[AES256_GCM,data:etnMJNWqTN8MvwlpMUJchMnHkbGupAlXQnyfAw==,iv:1Jf1lcR7uIJhheaTvQMkKy6h1eMjL3KMgAF9VhR7z/c=,tag:ajdVnVqow0tK9Rcb+FbQGw==,type:str]
-KF_SESSION_ENCRYPTION_KEY=ENC[AES256_GCM,data:UWkX+zIm71pREHg8dCbw3JbgGU6mO5eqjBxezZdTqDuCX0jcVsitSVetuEs=,iv:nPaZvi0uNodbteZdITLubXZL4BoQF1QAlewcLHIqGAw=,tag:eaNmosATQCuTeSb1WdPD0A==,type:str]
+SESSION_ENCRYPTION_KEY=ENC[AES256_GCM,data:yMrH8k/y8Gxf71apfbrZTJzFZIGLg/UkKA7SjjnmZHa4C8N5jQh+1EodFrQ=,iv:+j/D/kFR33igr1dO0fbgagF1+bUQ/GDOHvK4WzsjCoc=,tag:NKxNAi7Bbbm/k1joSAsaSg==,type:str]
+DEPLOY_HOST=ENC[AES256_GCM,data:0Ccnkih2lLPD7rgx,iv:h9PX8z01BIU4UtXD/18XloDYOATijLyVzvw9x3YjLkE=,tag:DBX6EPJLQagAxkYyUzH5rg==,type:str]
+DEPLOY_USER=ENC[AES256_GCM,data:CJzc9p1i,iv:tawoH57OU8NKMS3OEC83k1KDdikDRAyzP2h4GMZ263k=,tag:AvX1AmX3WAzj8d2r+kj1Wg==,type:str]
+DEPLOY_KNOWN_HOSTS=ENC[AES256_GCM,data:RTrzEfo5xzNo/4D8jQxmjXWm/8UJssT3TgOAGy6u0JbLDj3ap2SXU6H9Jb5U5k66kih1Lm2I5Wb4jbllU4i4qe6dnHuTrXxj81hMSVS3/0xD4UrjWCTpORtAuzwd,iv:q0R/NIxxBoNJFPIuCZa1mp+Sn1PrmOlP0208ePnBTHg=,tag:b7qYQJ3rXsvUzDJfHxXUzw==,type:str]
 sops_age__list_0__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEbVc3ZWVsWkJMOU9JMlRx\nbHV3cmVZaURiK3R2bGJ6bWQ4MGJBR3pTSlhvClBwcXlLY0kzeWtoT2ZmMllmVjF5\nSWxlTGt0bXM2cUYxWFhEdTRNcDVQc0kKLS0tIGwvbCt0TnM3ZVlaMWdPWlM2NVFG\nN0prc2JDcUtZa0xIU0hhZWVocUIvVjQKiCK6J6E+DZcBvYpA51eO0KCmRBrjpj1L\nB1obxrRP1OhwkTYfP0whzmu2DT4405pr6SGMMQb2BgdpmKJeAWXz9Q==\n-----END AGE ENCRYPTED FILE-----\n
 sops_age__list_0__map_recipient=age1wravpjmed26772xfjhawmnsnc4933htapg6y5xseqml0jdv8z9hqemzhcr
 sops_age__list_1__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhMGQ4M053RkpyUjZTT1du\nb1NVYkZra3h3MGpvSDRDeUNFaU5WUFNjVUFrCnZtRGVlTmIzU0xCZnBPaUV4dGNu\nYUMxeVFWa2s0d2ZWYXpha0xBMEpaTGsKLS0tIC81SDd2MlJ2QUhBQWJBb05VWFBH\nZ3hrR1BZNkFxWGIvWVQzMVlFNlB5aDQK9qQNpzsN7Kulcyk0/zA218bvAcuoMXKs\nXmv9JvpQgQqmpjMflq63Fkw29ayy2YHFsCJPvF90EObsorXv8tx42A==\n-----END AGE ENCRYPTED FILE-----\n
@@ -61,7 +64,9 @@ sops_age__list_6__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb2
 sops_age__list_6__map_recipient=age1yubikey1qdetc45zkjk33sz9zxpl3tl9kp7qsrp9y36v40m4xkc7cewacr7dudst2nv
 sops_age__list_7__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHBpdi1wMjU2IHRGMmVldyBBcHZ2TFEw\nQlU1SGhBazBaZEZpZXFFaWZsdm5SNHVlVEcvcThUNHU2akhabQpjZ3NQSktZVWpZ\nYTJGTVBaVForUVk5QjhOOWQ4TS9mOE91bFVjQzQ0akUwCi0tLSBRaEluRFJtUDlt\nend2TTZNdC9SWkI0WlVCSVI5UHdkMFUremlBWTJwaE5FCphNJ/kDuSray9KM7PSz\n4+S/Hohc9rCYcb/k//jTixrkwrLnoo5rKLtmEWvxH1OlHUMHiNHG+Qd5IFDJpHeG\n+bM=\n-----END AGE ENCRYPTED FILE-----\n
 sops_age__list_7__map_recipient=age1yubikey1qf7pngj2vx5dcjmd5wrkaqdzwk32vdmpdkqk2cj86s038kgp3m7wycjzgdx
-sops_lastmodified=2026-10-30T18:01:11Z
-sops_mac=ENC[AES256_GCM,data:eD6GzCdRu1PqF4k+cQN43C/xF5i2Dhw1AAuzXvMaW5xLZsxUEEwP7A0F2x9ISVWeQDtcHNPjKVkaiaEbt1l427B0f3Qe7TPKL6/24TDO4pNALGmj+iw2IVytPi0RGel5i/DZ6Yd0MWk5+cKZRTuPODc5ZIwlB6oiNjm/QrwdNFk=,iv:lVrW6VXSZrgHZL2Jg9UtM5q8+ZoLys1ROyBL1BylVbU=,tag:2KRFZKh7h5iH4K+DmPsAXw==,type:str]
+sops_age__list_8__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5bUNuV0kxWERTVG1IQWRl\nNUpxb0w2RmVrazZYOGw1aDZ0TlNQdXMydkUwCmNxR240UGE3UUw2Z1lFNC9NRFpx\nY3Y4TXJKUXI3UWhhbVBhOElJVEhEVk0KLS0tIFJzemtwZ29QZkRQMGVFNjZJVDkw\nUDg2UU5nbmdkVU5pWGo4by9pZUtueXMKSUlBDlxCvDlrx5wnz1uYcO8t4/iGT5i4\nNeXWGGFjGlcvQ8bkcOJZ+cN6lMqKw+IvRe2EAzvaujBNHnmv1Dgq0w==\n-----END AGE ENCRYPTED FILE-----\n
+sops_age__list_8__map_recipient=age1qvur8d4mgcpf68zuy4shvt3s4kzsk70l3wafej53t430z3xsssvqth88rf
+sops_lastmodified=2026-11-02T19:28:29Z
+sops_mac=ENC[AES256_GCM,data:aN2liNjtpYImpoM0Is8TCiZnJ1JfXSyn1g0+mwRxr2C47UrcocdOF++u/wI6eZEA8pN9v0Tkm+6545olx6BEo6FgQm+6x0ZCeYxWkqQriVJlBPIzX9EFpdVMNwVnyTEW338n3y9h7IhSoatQpSWaLj/yi5OpQiiTGcQkgq0lTRE=,iv:OlbmLnVbXEIYYrkI8fUrDOBC8TVXHdCdQCiHskXTbms=,tag:VuTQd68nmIDXOPs7Aw7EuA==,type:str]
 sops_unencrypted_suffix=_unencrypted
 sops_version=3.12.1