devops-ladder

A server built from the repository, not from console clicks.

Provisioned and firewalled with Terraform, state in Postgres on a second host
Hardened with Ansible, verified by 23 checks that re-run after every change
Served by nginx in Docker, behind a rule set that stops Docker bypassing the host firewall
TLS from Let's Encrypt, renewed on a timer