Introduction
inforge is a Go toolchain that turns declarative YAML resource definitions into real cloud deployments using Pulumi and GitHub Actions. It enforces an opinionated, multi-region, multi-provider infrastructure model with built-in runtime secret delivery for services.
What inforge does
- Validates your resource definitions against JSON schemas
- Previews what Pulumi would create, update, or destroy
- Deploys your infrastructure via the Pulumi Automation API
- Delivers secrets to services — resolving each service's env-var and grant values and writing
them, age-encrypted directly to the host's own SSH key, to the host as
secrets.age(no secret value is ever baked into an artifact, and there is no runtime fetch from any backend) - Provides reusable GitHub Actions so consumer repos get preview/deploy/reconcile
workflows with a single
uses:line
Supported providers
| Provider | Resources |
|---|---|
| Hetzner Cloud | Network, Compute, self-hosted PostgreSQL (database cluster + database) |
| Cloudflare | DNS |