Bootstrap a terraform

.env.example

@@ -0,0 +1,2 @@
+AWS_ACCESS_KEY_ID=
+AWS_SECRET_ACCESS_KEY=

.gitea/workflows/ci.yml

@@ -0,0 +1,23 @@
+on:
+  push:
+
+jobs:
+  terraform:
+    runs-on: ubuntu-latest
+    env:
+      AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
+      AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+    steps:
+      - uses: actions/checkout@v4
+      - name: Setup Terraform
+        uses: hashicorp/setup-terraform@v3
+      - uses: taiki-e/install-action@just
+      - name: Init
+        run: just terraform init
+      - name: Lint
+        run: just terraform-lint
+      - name: Plan
+        run: just terraform plan -out=tf.plan
+      - name: Apply
+        if: ${{ github.ref == 'refs/heads/master' }}
+        run: just terraform apply -auto-approve tf.plan

.gitignore

@@ -34,3 +34,4 @@ override.tf.json
 .terraformrc
 terraform.rc
 
+.env

README.md

@@ -1,2 +1 @@
-# terraform-template
+# Terraform Template
-

justfile

@@ -0,0 +1,16 @@
+# Run terraform with required environment
+terraform +ARGS:
+    #!/usr/bin/env bash
+
+    # Load secrets from env file (if it exists)
+    set -a
+    source ./.env || true
+    set +a
+
+    cd src/
+
+    terraform {{ ARGS }}
+
+terraform-lint:
+    just terraform validate
+    just terraform fmt -check -recursive

src/.terraform.lock.hcl

@@ -0,0 +1,2 @@
+# This file is maintained automatically by "terraform init".
+# Manual edits may be lost in future updates.

src/terraform.tf

@@ -0,0 +1,19 @@
+terraform {
+  backend "s3" {
+    bucket = "terraform-template"
+    key    = "terraform.tfstate"
+    region = "main"
+
+    endpoints = {
+      s3 = "https://s3.jakehoward.tech"
+    }
+
+    skip_region_validation      = true
+    skip_requesting_account_id  = true
+    skip_credentials_validation = true
+    skip_metadata_api_check     = true
+    use_path_style              = true
+  }
+
+  required_providers {}
+}