chore: add S3 backend config, Terraform gitignore, and nix terraform

Author: ThomasK33

.gitignore

@@ -16,3 +16,21 @@
 # MkDocs
 /site/
 /.cache/
+
+# Terraform
+*.tfstate
+*.tfstate.*
+.terraform/
+crash.log
+crash.*.log
+*.tfplan
+*.tfplan.*
+override.tf
+override.tf.json
+*_override.tf
+*_override.tf.json
+.terraformrc
+terraform.rc
+
+# Backend config (local-only, not committed)
+terraform/backend.hcl

flake.nix

@@ -35,6 +35,7 @@
 
               # Cloud tooling
               awscli2
+              terraform
 
               goreleaser
               actionlint

terraform/versions.tf

@@ -1,5 +1,12 @@
 terraform {
-  required_version = ">= 1.5"
+  required_version = ">= 1.11"
+
+  backend "s3" {
+    region       = "eu-central-1"
+    encrypt      = true
+    use_lockfile = true
+    # bucket and key supplied via -backend-config at init time.
+  }
 
   required_providers {
     aws = {