terraform { required_providers { vultr = { source = "vultr/vultr" } sops = { source = "carlpett/sops" } aws = { source = "hashicorp/aws" } cloudflare = { source = "cloudflare/cloudflare" } keycloak = { source = "keycloak/keycloak" } } encryption { method "aes_gcm" "default" { keys = key_provider.pbkdf2.default } state { method = method.aes_gcm.default enforced = true } } }