# GitHub token secret consumed by the jodconverter Jenkins pipeline.
# This manages the secret container only. The value must be set out-of-band
# (AWS console/CLI) so it never lands in Terraform state or source control.
# Resulting secret name: dev/jodconverter/GH_TOKEN
module "gh_token_secret" {
  source = "git@github.com:theorchard/terraform-secrets-manager.git//?ref=1.6.1"

  environment                    = var.environment
  service_name                   = var.service_name
  secret_name                    = "GH_TOKEN"
  application_family             = var.application_family
  secret_recovery_window_in_days = 7
}