Infrastructure as code

Infrastructure as code with Terraform, Ansible and GitOps

If your infrastructure only exists in a console and in one engineer's memory, it cannot be reviewed, audited or rebuilt. We turn it into code that can.

Infrastructure as code means describing your servers, networks, Kubernetes clusters and their configuration in Terraform, Terragrunt, Ansible and Packer, and deploying applications through GitOps (ArgoCD) with policies (Kyverno). We do this on AWS (including EKS) and on Hetzner and other EU providers, for teams that need reproducible, reviewable infrastructure. Projects start at €4,000 and take 2–6 weeks.

Who it is for

  • Fintechs and SaaS companies whose cloud was built by hand in the console
  • Teams preparing for PCI DSS, DORA or NIS2 evidence on change control
  • Companies running Kubernetes (EKS) without a clear deployment and policy model
  • CTOs who need to rebuild an environment quickly after a failure, or for a new region or client

Why now

  • Nobody can say exactly what is running in the cloud account, or why
  • Auditors ask for evidence that infrastructure changes are reviewed and recorded
  • One engineer knows how everything was set up, and they are busy or leaving
  • Staging and production drift apart, so tests on staging prove little
  • You want to move some workloads to EU providers, and you cannot move what is not described

What you get

  • Terraform and Terragrunt for networks, compute, databases, IAM and DNS, structured per environment
  • Import of existing resources into code, without rebuilding what already works
  • Ansible roles for server configuration and hardening, including non-cloud and dedicated servers
  • Packer golden images so new servers start hardened and identical
  • GitOps with ArgoCD for Kubernetes applications, with environments promoted through Git
  • Kyverno policies that block unsafe workloads, such as privileged containers or unapproved images
  • CI for infrastructure: plan on every pull request, apply only after review, state stored and locked safely
  • Runbook and handover so your team can make the next change on its own

How it works

  1. Survey

    We map what exists: accounts, networks, servers, clusters, DNS, secrets, and how changes are made today.

  2. Design

    Repository layout, environments, state storage, module boundaries and the review flow.

  3. Codify

    We import and write the code step by step, with plans reviewed so nothing is recreated by accident.

  4. Hand over

    CI for plans and applies, documentation, and a session where your team makes a real change.

What “done” looks like

When the project ends, a new engineer can open one repository and see every account, network, cluster and server you run, how it is configured, and the history of every change with its reviewer. A pull request shows a Terraform plan before anything changes. A merged pull request is applied by CI, not from a laptop.

For Kubernetes, ArgoCD keeps the cluster in line with Git. If someone changes something by hand, it shows up as drift. Kyverno policies stop the most common unsafe patterns before they run.

Built for audits as well as engineers

The same setup answers several audit questions at once. Who changed the firewall rule? The pull request. Was it reviewed? Branch protection. Can you rebuild after a disaster? Here is the code, and here is the last time we did it.

We built this model for a payments fintech: Terraform and Terragrunt on AWS, EKS for microservices, ArgoCD, Kyverno and KEDA, a Packer golden image, and Ansible for the card-processing stack.

What we do not do

We do not hide your infrastructure behind our own tools or modules you cannot read. Everything is standard open-source tooling in your own repositories.

Related work

Questions clients ask

How much does it cost to move our infrastructure into Terraform?

From €4,000 excluding VAT for a small environment, such as one cloud account with a few services. Several accounts, Kubernetes and GitOps add scope. You get a fixed quote after we have seen what exists.

How long does an infrastructure-as-code project take?

2–6 weeks, depending on size. We work in small steps, so parts of the infrastructure are under code within the first week.

Do you have to rebuild everything?

No. We import existing resources into Terraform and check every plan before applying, so running systems are not recreated. Rebuilds happen only where you choose them.

Which clouds and tools do you use?

Mostly AWS (including EKS) and Hetzner, plus other EU providers and dedicated servers. Tools: Terraform, Terragrunt, Ansible, Packer, ArgoCD, Kyverno and KEDA. We adapt to tools you already use where they make sense.

Will our team be able to maintain it?

That is the goal. We keep the code plain, document the structure, and hand over with a real change made by your engineers. If you prefer, we can keep running it under a monthly plan.

Get your infrastructure out of the console

Tell us what you run and where. We will suggest a first step and a fixed price.

Talk to an engineer