terraform-example-foundation VS cloudblock

- How do we secure?

You can use this approach for each step along the way, how to secure secrets in your cloud? code? IaC? container deployments? CI/CD?

If we assume infra / app is code, the tooling matters a lot less. How do you provision certificates via IaC? How do you grant IAM to resources and how do you revoke?

There are examples like https://github.com/terraform-google-modules/terraform-exampl... of more advanced IaC architectures, but you can start as small or as complex as you want and evolve if done properly.

Personally, I love me some Kubernetes + ArgoCD (GitOps) + Google Workload Identity + Google Secret Manager, but I am 100% biased.

Also looked for something similar, and unfortunately didnt find one. Based our enterprise repo off the caf model (not using the module) similar to this google repo: https://github.com/terraform-google-modules/terraform-example-foundation

How did I tackle this exam? 1. On github there is an example foundation for GCP on terraform. https://github.com/terraform-google-modules/terraform-example-foundation I went through this week after week to help me learn. I made customizations and I deployed and destroyed over and over again, making changes. I used this to create a basic organization with a website, this is how I learnt.

If you are looking to setup a new cloud project with Terraform, then that is an another thing. For GCP, Google offers a toolkit: https://github.com/terraform-google-modules/terraform-example-foundation

https://github.com/terraform-google-modules/terraform-example-foundation maybe have a look at the layer approach from Google?

https://github.com/chadgeary/cloudblock Another one which you can use but with less work

2.) Cloudblock I use OCI's free tier.

It looks like you choose a DNS over HTTPS provider, and it defaults to OpenDNS.

/u/chadgeary made cloudblock which was super easy to setup with his tutorials

https://github.com/chadgeary/cloudblock pihole/wireguard

I’d recommend Oracle, as they have a free tier that should cover your use case. If your interested check out Step-by-step cloud deployment - Wireguard VPN

if you want to run it in the cloud, for free, and not rely on anything at home, use cloudblock and run it on oracle cloud infra, they have a forever free tier that i have been using for years.

https://github.com/chadgeary/cloudblock/ or https://github.com/chadgeary/cloudoffice/ are both fun projects

In case you're feeling ambitious, you can take a look at this project which is designed to make it easy to deploy your own ad-blocking VPN on a cloud server. Watch one of the step-by-step videos linked to on that page (like this one for Oracle Cloud) to see if it's something you'd feel comfortable setting up.