Use encrypted cloud storage for secrets and project configuration

[devium]

Possibly ansible-vault. This includes using a remote backend for terraform state. Possibly ArgoCD.