mormor83/terraducktel

Terraducktel is a self-hosted tool for managing infrastructure changes made with Terraform and Helm, the kind of tools teams use to spin up cloud servers and Kubernetes clusters through code instead of clicking around in a web console. Normally, companies pay for hosted services like Terraform Cloud to manage this process, and those bills add up fast as a team grows. Terraducktel replaces that paid service with something you run yourself using Docker, for free. At its core, it lets you point at a Terraform or Helm project stored in Git, preview what changes would happen, have a human approve those changes, and then actually apply them, all while tracking whether the real infrastructure has quietly drifted away from what the code says it should look like. Every apply pauses and waits for someone to review the exact plan and click Approve before anything happens, which protects against accidental or unreviewed changes to production systems. The project stores your cloud credentials encrypted rather than in plain text, keeps a separate storage area for each AWS account you manage, and writes down every important action, like who approved what and when, into an audit log you can review later. It also supports organizing work into separate Business Units, useful if one company manages infrastructure for multiple teams or clients under one installation. Under the hood it is built from a FastAPI backend, a React web interface, a Postgres database, and short-lived Docker containers that spin up to actually run each Terraform or Helm job before disappearing. Getting started involves cloning the repository, copying an example settings file, filling in a few secret keys, and running docker compose to bring the whole system up locally. The project describes itself as pre-1.0, meaning the core features work but it is still under active development, with more features planned on its roadmap.