FINI is a boutique consulting firm based in Williamsburg, VA. Historically we provided full service hosting and we still maintain some legacy customers for full hosting. Soon we hope to relaunch our retail domain registration business.
This repo is our modernized infrastructure. We used to build machines by hand. Then we toyed with ansible for a while. We've skipped quite a few automation fads over the last few decades, but now we're rebuilding with opentofu (freed terraform), 1Password, and DigitalOcean.
Following Lee Brigg's Structure.
- Layer 0: Billing
- Layer 1: Privilege
- Layer 2: Network
- Layer 3: Permissions
- Layer 4: Data
- Layer 5: Compute
- Layer 6: Ingress
- Layer 7: Application
Some things did not fit well in that structure and maybe they should have been in other repos, but you can also find here:
- architecture diagrams
- just-based convenience and standardization
- Claude's summary could be more helpful to you than what humans wrote in this file.
- OpenTofu continues the legacy of
terraformwithout the proprietary licensing garbage that Hashicorp switched to and that IBM has been happy to continue milking. - digitalocean provider
- onepassword provider
- The 1Password CLI must be configured for the onepassword provider to function.