fix: support unenrypted vault files for templating

NOTICE

@@ -67,7 +67,7 @@ License URL: https://gitea.com/gitea/go-sdk/src/tag/gitea/v0.25.1/gitea/LICENSE
 Module: dario.cat/mergo
 Version: v1.0.2
 License: BSD-3-Clause
-License URL: Unknown
+License URL: https://github.com/imdario/mergo/blob/v1.0.2/LICENSE
 
 ----------
 Module: filippo.io/age

internal/installer/config_template_test.go

@@ -110,7 +110,7 @@ codesphere:
 		Expect(string(rendered)).To(ContainSubstring(`apiToken: "super-secret-token"`))
 	})
 
-	It("rejects unencrypted prod.vault.yaml files", func() {
+	It("supports unencrypted prod.vault.yaml files", func() {
 		tempDir := GinkgoT().TempDir()
 		vaultPath := filepath.Join(tempDir, "prod.vault.yaml")
 
@@ -120,8 +120,6 @@ codesphere:
 
 		_, err = installer.LoadVaultData(vaultPath, "")
 
-		Expect(err).To(HaveOccurred())
-		Expect(err.Error()).To(ContainSubstring("is not SOPS-encrypted"))
+		Expect(err).ToNot(HaveOccurred())
 	})
-
 })

internal/installer/vault_templating_secret_store.go

@@ -124,16 +124,16 @@ func LoadVaultData(vaultPath, ageKeyPath string) (*files.InstallVault, error) {
 	if err != nil {
 		return nil, fmt.Errorf("failed to inspect vault file %s: %w", vaultPath, err)
 	}
-	if !encrypted {
-		return nil, fmt.Errorf("vault file %s is not SOPS-encrypted", vaultPath)
-	}
 
-	decrypted, err := DecryptFileWithSOPS(vaultPath, ageKeyPath)
-	if err != nil {
-		return nil, fmt.Errorf("failed to decrypt vault.yaml: %w", err)
+	if encrypted {
+		decrypted, err := DecryptFileWithSOPS(vaultPath, ageKeyPath)
+		if err != nil {
+			return nil, fmt.Errorf("failed to decrypt vault.yaml: %w", err)
+		}
+		data = decrypted
 	}
 
-	vault, err := parseVaultData(decrypted)
+	vault, err := parseVaultData(data)
 	if err != nil {
 		return nil, fmt.Errorf("failed to parse decrypted vault.yaml: %w", err)
 	}

internal/tmpl/NOTICE

@@ -67,7 +67,7 @@ License URL: https://gitea.com/gitea/go-sdk/src/tag/gitea/v0.25.1/gitea/LICENSE
 Module: dario.cat/mergo
 Version: v1.0.2
 License: BSD-3-Clause
-License URL: Unknown
+License URL: https://github.com/imdario/mergo/blob/v1.0.2/LICENSE
 
 ----------
 Module: filippo.io/age