Skip to main content

Introduction

inforge is a Go toolchain that turns declarative YAML resource definitions into real cloud deployments using Pulumi and GitHub Actions. It enforces an opinionated, multi-region, multi-provider infrastructure model with built-in runtime secret delivery for services.

What inforge does

  1. Validates your resource definitions against JSON schemas
  2. Previews what Pulumi would create, update, or destroy
  3. Deploys your infrastructure via the Pulumi Automation API
  4. Delivers secrets to services — writing each service's provider coordinates and a host-key-encrypted machine-identity credential to the host, so the service fetches its own secrets at runtime (no secret value is ever baked into an artifact)
  5. Provides reusable GitHub Actions so consumer repos get preview/deploy/reconcile workflows with a single uses: line

Supported providers

ProviderResources
Hetzner CloudNetwork, Compute
CloudflareDNS
NeonDatabase (PostgreSQL)
InfisicalSecrets