infra/
├── README.md
└── rustfs/                   # RustFS S3-compatible storage (replaced MinIO)
    ├── README.md             # RustFS + rc runbook (buckets / IAM)
    ├── loki/                 # Loki log storage buckets
    │   ├── README.md
    │   ├── loki.tf          # Loki-specific bucket configuration
    │   ├── main.tf          # Main Terraform configuration
    │   └── run.sh           # Deployment script
    └── tf-s3-backend/        # Terraform S3 backend setup
        ├── README.md
        ├── main.tf          # Main configuration
        ├── run.sh           # Deployment script
        └── tf-s3-backend.tf # Backend bucket configuration

Services Overview

RustFS Storage

Loki Buckets: Dedicated storage for Grafana Loki log aggregation
Terraform Backend: Centralized state management for all Terraform configurations

RustFS speaks the S3 API but not MinIO's Admin API, so buckets are managed with the AWS provider while lifecycle rules and IAM users/policies use the official rc client. See rustfs/README.md.

External Resources

Kubernetes YAML: Managed in separate repository ryan4yin/k8s-gitops
Secrets Management: Handled via agenix in ../secrets

Usage

Each subdirectory contains its own Terraform configuration:

Navigate to specific service:
```
cd infra/rustfs/loki
```
Deploy configuration:
```
bash run.sh
```

Manual deployment:

terraform init
terraform plan
terraform apply

Security Considerations

All storage buckets are configured with appropriate access policies
State files are encrypted at rest
Access credentials are managed through environment variables
Network access is restricted to necessary hosts only