From 91cbcf7a37d47de4ddb2ed99438493767c8c4bae Mon Sep 17 00:00:00 2001
From: Khue Doan <mail@khuedoan.com>
Date: Tue, 17 Mar 2026 07:36:58 +0700
Subject: [PATCH] build: split secrets to a separate target

---
 Makefile | 13 +++++++------
 1 file changed, 7 insertions(+), 6 deletions(-)

diff --git a/Makefile b/Makefile
index 3d5e205..5081e34 100644
--- a/Makefile
+++ b/Makefile
@@ -11,12 +11,7 @@ compose:
 infra:
 	cd infra/${env} && terragrunt apply --all
 
-bootstrap: platform
-	# TODO needs to wait for namespaces e.g. vault
-	toolbox secrets \
-		--settings settings.yaml \
-		--hosts-file infra/_modules/nixos/hosts.json \
-		--host kube-1
+bootstrap: platform secrets
 
 platform:
 	toolbox gitops \
@@ -24,6 +19,12 @@ platform:
 		--hosts-file infra/_modules/nixos/hosts.json \
 		--host kube-1
 
+secrets:
+	toolbox secrets \
+		--settings settings.yaml \
+		--hosts-file infra/_modules/nixos/hosts.json \
+		--host kube-1
+
 apps:
 	# TODO multiple env
 	@temporal workflow start \
-- 
2.51.2