Mastering Terraform: Terraform with GitHub Actions

Structure infrastructure as code with Terraform, leveraging providers and APIs to plan and apply, reuse configurations, boosting collaboration and clarity across teams.

Download the Windows amd64 Terraform binary from the official site, extract it, and place terraform.exe in a PATH directory. Verify installation by running terraform -version in the command prompt.

Install terraform on macOS Ventura using Homebrew or manual download, move the binary to /usr/local/bin, and verify with terraform -version.

Install terraform on linux systems, focusing on ubuntu with apt. Add HashiCorp GPG key and repository, update packages, install terraform, and verify with terraform -version.

Explore using Hetzner Cloud to automate infrastructure management with Terraform, create a project, generate and safeguard an API token, and spin up a configurable virtual server.

Learn to write your first main.tf in Terraform, configure a Hetzner provider, upload an SSH key, and provision a virtual server with specific size, location, and Ubuntu.

Initialize your terraform project with terraform init, preview changes with terraform plan, and apply infrastructure with terraform apply, ensuring safety checks and repeatable deployments.

Verify a Terraform-created Hetzner Cloud virtual server by inspecting the web console, SSHing into the instance, confirming SSH key deployment, and loading the default Apache page to confirm web serving.

Learn how to automate code testing and deployment with GitHub Actions, a robot assistant inside GitHub that reduces manual steps, lowers errors, and speeds deployments.

Store Hetzner Cloud API token and SSH public key securely in GitHub Actions secrets to automate workflows while keeping sensitive data private.

Write your first yml for deployment with GitHub actions, triggering on main branch, using Hetzner Cloud and SSH key vars, and running Terraform init, plan, and apply with review.

Store the Terraform state file as a JSON-based map of your infrastructure and configure AWS S3 with a dedicated user and access keys for secure, consistent access across GitHub Actions.

Push your Terraform code to GitHub and review the Terraform plan in GitHub Actions. Approve and apply changes to deploy live infrastructure on Hetzner.

Explore Cloudflare, a tool that manages traffic, keeps websites fast, and shields them from internet threats, with a nod to AWS WAF and CDN and Akamai as alternatives for projects.

Protect your server from DDoS attacks by routing traffic through Cloudflare and leveraging its CDN to block traffic. Enforce HTTPS, enable strict SSL, and restrict Wordpress admin access by IP.

Automatically fetch Cloudflare IPs and update the cloud firewall, using a Python script and Terraform integration with a data resource and a local block, to enforce traffic from Cloudflare only.

Implement a cloud firewall for the server with Terraform, creating a https firewall open to all sources and an ssh firewall restricted to private IPs, with a Cloudflare-only refinement planned.