From 735b8a9ee3e4ecf0e3b267645e388ae967b77989 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Torjus=20H=C3=A5kestad?= <torjus@usit.uio.no>
Date: Sat, 7 Feb 2026 23:33:36 +0100
Subject: [PATCH] terraform: add dns and homelab-deploy secrets to ns1 policy

ns1 needs access to shared/dns/* for zone transfer key and
shared/homelab-deploy/* for the NATS listener.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
---
 terraform/vault/hosts-generated.tf | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/terraform/vault/hosts-generated.tf b/terraform/vault/hosts-generated.tf
index f88ab67..f485f59 100644
--- a/terraform/vault/hosts-generated.tf
+++ b/terraform/vault/hosts-generated.tf
@@ -29,6 +29,8 @@ locals {
     "ns1" = {
       paths = [
         "secret/data/hosts/ns1/*",
+        "secret/data/shared/dns/*",
+        "secret/data/shared/homelab-deploy/*",
       ]
     }