Terraform

[MVP] Multi-layer Terraform IaC for on-premise GitLab deployment on KVM/QEMU (Libvirt). Highly available core components include Kubeadm control plane, Patroni Postgres, Redis Sentinel, MinIO erasure coding, Gitaly Praefect, HashiCorp Vault with hierarchical PKI and AppRole, Harbor Registry, and GitLab Runner. The setup also integrates Keycloak OIDC SSO, standalone Harbor Bootstrapper, and LGTM observability stack. Provisioned end-to-end via Packer, Terraform, and Ansible.

OpenTofu/Terraform module for managing Kubernetes artifacts (Flux GitRepository, HelmRelease, namespace, pull secret) for 0x6a6c70 homelab projects

Docker image based on Debian with Terraform and Ansible pre-installed.

Contains the terraform code that actively manages the lab environment

Contains Gitlab components and scripts that can be used to automate the creation of standardized CI/CD pipelines

The purpose of this system is to demonstrably comply with the applicable laws and regulations that apply to your business operations. We achieve this by linking these regulations to a standard control set that is most suitable. We then translate the relevant control set rules into scripts for the implementation tools that best suit your system environment and use these same tools to demonstrate that the required measures are in place and active, based on reports that either confirm this or contain recommendations for improvement.

Contains a suite of Terraform modules specifically designed for Proxmox operations.

Official GitLab Terraform Provider.

The restricted group and the sandbox identity it holds, as Terraform.

Docker image which contains the gitlab-terraform shell script

Ansible, Nix & Terraform configuration for @shivjm’s home infrastructure.

Reusable Terraform modules and Ansible roles shared across Eiseron products

Medium-interaction SSH/Telnet honeypot built with Cowrie, Loki, Promtail, and Grafana - provisioned on DigitalOcean via Terraform with a GitLab CI validation pipeline.

I designed and published a professional focused on pipeline reusability, security, and code quality. The project demonstrates real-world DevOps practices such as semantic versioning, reusable CI components, secure container builds with Kaniko, and standardized linting for Python and Django applications. This initiative reflects my approach to building scalable, maintainable CI/CD architectures in enterprise environments.

Key Features:

Native GitLab CI/CD Components Semantic versioning with pinned releases No privileged runners required Enterprise-ready defaults Configurable inputs without pipeline duplication

Included Components:

Kaniko – Secure, daemonless container image builds Pylint – Python static analysis Pylint Django – Django-specific linting rules Flake8 – Python style and code quality checks DjLint – Django template linting and formatting Yamllint – YAML validation and formatting Pytest – Unit testing and code coverage ...

OpenTofu/Terraform module for granting an automation agent a scoped ServiceAccount (cluster-wide read + targeted write) and a minted kubeconfig in a Kubernetes cluster

For AWS Lambda (free for thousands of calls per month)

Terraform module to deny access to GCP services, with project-level exceptions.