Terraform on heezy.blog

Getting Cloudflare on IaC

Thu, 14 May 2026 00:00:00 +0000

Everything in the lab is managed as code. FortiGate firewall rules, Proxmox VMs, Kubernetes manifests. Cloudflare was the last holdout. DNS records, tunnel config, and zone settings all lived in the dashboard, clicked into existence and never tracked anywhere. Time to fix that.

Terraform, Ansible, and the Automation That Runs Everything

Sat, 20 Dec 2025 00:00:00 +0000

This is the story of taking a homelab that was 100% manually configured and turning it into something where every change is a git commit, every deployment is a GitHub Actions run, and I never SSH into a box to make a “quick fix” again. It took a lot of hours, a lot of broken credential chains, and one memorable incident where I leaked secrets because of echo output. But it works now, and it works well.

Lab Modernization: From Manual Configs to Full Automation

Thu, 18 Sep 2025 00:00:00 +0000

This is the journal of taking a homelab that was held together with SSH sessions and good intentions and turning it into something that manages itself. It took months of evenings and weekends, a lot of broken things, and more hours than I want to admit. But the lab went from “I hope nobody touches that server” to “push to main and walk away.”