terraform {
  required_version = "= 1.12.6"
  required_providers {
    local = {
      source  = "registry.opentofu.org/hashicorp/local"
      version = "2.5.3"
    }
  }
}

variable "content" {
  type      = string
  default   = "synthetic-v1"
  sensitive = true
}

resource "local_sensitive_file" "demo" {
  filename             = "${path.module}/out/demo.txt"
  content              = var.content
  file_permission      = "0600"
  directory_permission = "0700"
}

output "file_path" {
  value = local_sensitive_file.demo.filename
}