Rotate One Secret with -replace

This machine has OpenTofu, the open-source tool that reads the same configuration language as Terraform. Run it as tofu (terraform runs the same program). There is no network: the local, random and null providers are already installed.

/home/student/infra/indexer generates two passwords, random_password.db and random_password.api, and writes them to files. The database password may have leaked.

Task

• Generate a new value for random_password.db (and its file).
• random_password.api and its file must keep their current values.
• Do not change the configuration. A new plan must report no changes.