Tag
Terraform
Infrastructure as Code with Terraform, from MikroTik VLANs to the Azure modules published on this site.
17 articles
- Vault Configuration Under Terraform: Staged Migration Without Downtime22 Oct 2026HashiCorp Vault OSS on Kubernetes holds secrets for 25+ services. Bringing its policies, auth methods and roles under Terraform in 6 reversible stages, with zero Vault downtime.
- Acmebot härten für ISO 27001 & NIS2: Zero-Trust-Zertifikate in Azure22 Sept 2026Der Standard-Deploy von Acmebot hat drei öffentliche Angriffsflächen. So isolierst du die Let's-Encrypt-Automatisierung mit Private Link, VNet Integration und Private DNS, komplett in Terraform.
- WireGuard-VPN auf MikroTik automatisiert: Role-based Peers via Terraform22 Sept 2026WireGuard-VPN auf MikroTik per Terraform: feste Peer-IPs pro Gerät und rollenbasierter Zugriff per Firewall, damit das Handy nicht dasselbe erreicht wie der Admin-Laptop.
- Private AKS on Azure: No Public API Server, No Public Node IPs, No Default Outbound07 Sept 2026A production AKS cluster with private_cluster_enabled, forced-tunneled node egress via a Route Table, and private-endpoint-only ACR/Key Vault: the workload cluster behind a Hub & Spoke and an Azure Firewall.
- GitOps for Firewall Rules: MikroTik + Terraform + Atlantis30 Aug 2026Every firewall rule, VLAN, DHCP lease and NAT rule on my MikroTik RB5009 lives in Terraform and ships via Atlantis PRs. The full flow from PR to RouterOS.
- Azure Logic App Standard: Private Storage Needs Four Private Endpoints11 Aug 2026A Logic App Standard hit HTTP 403 on every boot. Root cause: private Storage needs four Private Endpoints (blob, file, queue, table). Postmortem and Terraform fix.
- My Terraform Runner Destroyed Itself Mid-Apply02 Aug 2026Atlantis was running inside k3s, managing the same Proxmox VMs it ran on. When bpg/proxmox issued a qmshutdown for a non-live-update attribute, it killed the Atlantis pod that was executing the apply. The structural hazard and the fix.
- My Firewall Had 77 Rules. Terraform Knew About 22 of Them.22 Jun 2026Multiple rounds of 'reconstruct the firewall' work each added a fresh generation of rules without removing the old one. Because RouterOS evaluates rules in order and stops at the first match, the oldest, broadest generation was silently winning over the newest, narrower one, undoing a security tightening that looked complete in Terraform.
- NIS2 Article 21 in Azure: Implementing Network Security Controls with Terraform17 May 2026How the network security measures of NIS2 Article 21 map to Azure resources, implemented with Terraform. Concrete code, not legal theory.
- Zero-Trust RAG: Defeating the Shared Private Link Deadlock in Azure Terraform16 May 2026How to programmatically approve Azure AI Search Shared Private Links using AzAPI, and why your AI architecture will fail an audit without proper Identity Chaining.
- Breaking the Loop: Solving Circular Dependencies in Azure Firewall Routing07 May 2026How to implement Azure Firewall Forced Tunneling in Terraform without triggering cycle errors, and why a simple 0.0.0.0/0 route will instantly break your Windows VMs.
- Automating MikroTik WireGuard VPN with Role-Based Access via Terraform05 May 2026Deploy a WireGuard VPN on MikroTik with Terraform, with role-based network access that keeps a phone away from what the admin laptop can reach.
- Automating MikroTik Bridge VLAN Filtering & Proxmox Trunks with Terraform04 May 2026MikroTik Bridge VLAN Filtering without the lockouts: automate the VLAN matrix, Proxmox trunk ports, and edge access ports with Terraform.
- Surviving Azure Policies: Zero-Trust Hub & Spoke with Terraform03 May 2026Build an Azure Hub & Spoke network with Terraform that denies internet ingress from day one and survives DeployIfNotExists (DINE) policies without breaking CI/CD.
- Implementing a Zero-Trust MikroTik Firewall with Terraform03 May 2026How I enforce strict VLAN isolation, FastTrack established traffic, and run a default-deny firewall on MikroTik RouterOS with Terraform as Infrastructure as Code.
- Deploying Gemma 4 26B on Proxmox: IaC Setup with Terraform, Ansible & AMD iGPU02 May 2026How I automate a local AI stack on a Proxmox LXC with Terraform and Ansible: Ollama, Gemma 4 26B, Open-WebUI and the AMD Radeon Vega iGPU workaround.
- Hardening Azure Acmebot for ISO 27001 & NIS2 Compliance01 May 2026Network-isolating Azure Acmebot for ISO 27001 and NIS2: Zero-Trust Let's Encrypt automation with Terraform, Azure Private Link, and VNet Integration.