Vault env generation.

.gitea/workflows/auto-pr-tofu-plan.yml

@@ -57,6 +57,16 @@ jobs:
           version: ${{ env.OPENTOFU_VERSION }}
           tofu_wrapper: true
 
+      - name: Generate .env from Hashicorp Vault
+        uses: https://git.trez.wtf/Trez/hc-vault-env@main
+        with:
+          HC_VAULT_VERSION: ${{ env.HC_VAULT_VERSION }}
+          HC_VAULT_ADDR: ${{ secrets.TREZ_VAULT_ADDR }}
+          HC_VAULT_USERNAME: ${{ secrets.VAULT_GITEA_USER }}
+          HC_VAULT_PASSWORD: ${{ secrets.VAULT_GITEA_PASSWORD }}
+          HC_VAULT_SECRETS_PATH: tar-varlon-terraform/env
+          ENV_FILE_NAME: cloudflare/.env
+
       - name: Run tofu init
         uses: dnogu/tofu-init@v1
         with: