variable "state_passphrase" {
  type      = string
  sensitive = true
}

terraform {
  encryption {
    key_provider "pbkdf2" "lab" {
      passphrase = var.state_passphrase
    }
    method "aes_gcm" "lab" {
      keys = key_provider.pbkdf2.lab
    }
    state {
      method   = method.aes_gcm.lab
      enforced = true
    }
    plan {
      method   = method.aes_gcm.lab
      enforced = true
    }
  }
}