Wege der Zusammenarbeit

# Office, files, mail: without US transfers
services:
  nextcloud:
    image: nextcloud:31-fpm
    environment:
      OIDC_ISSUER: https://id.customer.eu/realms/staff
  collabora:
    image: collabora/code:latest
  mailcow:
    dkim: true

# The exit target as code, nothing clicked in a console
resource "proxmox_cluster" "core" {
  nodes       = 5
  storage     = "ceph"
  replication = 3
}

module "gitops" {
  source = "./modules/argocd"
  idp    = module.identity.oidc_issuer
}

# Your repository, your resources: we run them
ownership:
  repository: "customer/platform-infra"
  cloud_accounts: customer
klackwerk:
  monitoring: 24/7
  patch_window: "Tue 02:00 CET"
  release_pipelines: true

# Every change ships through the same pipeline
stages:
  - name: plan
    run: terraform plan -out="tfplan"
  - name: review
    approvals: 2
  - name: apply
    run: terraform apply "tfplan"
manual_steps: 0

# SLOs live in Git, not in a slide deck
groups:
  - name: platform-slo
    rules:
      - alert: ErrorBudgetBurn
        expr: slo:burn_rate5m > 14.4
        for: 2m
        labels: { severity: page }

# Each dependency becomes its own module
modules:
  - replace: "Microsoft Entra ID"
    with: keycloak | authentik
    effort: 2 weeks
  - replace: "AWS RDS (PostgreSQL)"
    with: postgresql on proxmox
    effort: 4 weeks
start: smallest module, shipped on its own