A self-hostable alternative to Terraform Cloud and Ansible AWX. It runs OpenTofu and Ansible from one control plane and is API-compatible with Terraform Cloud/Enterprise tooling.
helm install stackweaver oci://ghcr.io/vhco-pro/charts/stackweaver --version <X.Y.Z>Documentation · Deployment guide · Verifying releases
| Component | Repo | OpenSSF Scorecard |
|---|---|---|
| Helm chart | stackweaver-helm |
|
| Backend API | stackweaver-api |
|
| Orchestrator | stackweaver-orchestrator |
|
| OpenTofu Runner | stackweaver-opentofu-runner |
|
| Ansible Runner | stackweaver-ansible-runner |
|
| Frontend | stackweaver-frontend |
|
| Zitadel bootstrap | stackweaver-zitadel-init |
|
| Secret bootstrap | stackweaver-secrets-init |
The stackweaver-* repositories above are release mirrors published from the Stackweaver source tree. They take issues, not pull requests.
Ecosystem - developed in the open, pull requests welcome:
| Repo | What it is |
|---|---|
terraform-provider-stackweaver |
Terraform provider for Stackweaver, derived from terraform-provider-tfe and kept in sync with it |
stackweaver-operator |
Kubernetes operator for managing Stackweaver deployments |
stackweaver-registry |
Multi-format artifact registry with upstream caching, SSO and RBAC |
| Repo | What it is |
|---|---|
stackgraph |
Infrastructure diagram generator for OpenTofu/Terraform - production-quality architecture diagrams from state files, plan JSON, and HCL source |
terraform-provider-garage |
Terraform provider for Garage, the S3-compatible object store (Admin API v2) |
builders |
PDS-backed golden-image builders for the homelab |
| Repo | What it is |
|---|---|
distil |
Zero-CVE container images. Fully automated, built with apko + Wolfi |
swift-release-action |
Reusable macOS Swift app release pipeline - reusable workflow plus a secret-free composite build/sign/package action |
| Repo | What it is |
|---|---|
ssm-connect |
Config-driven macOS menu-bar app that auto-establishes AWS SSM port-forward tunnels to EC2 workstations (SSO auth, bundled session-manager-plugin) |
dcv-session-agent |
On-box agent for multi-user Amazon DCV on a single self-managed EC2 host - per-user virtual sessions and AWS-SSO-identity token auth, no broker, no passwords |
claude-companion |
macOS menu-bar companion for Claude Code - tool-call auto-approval against a shared blacklist, session monitoring, usage and cost tracking |
postbode |
Gmail to ClearFacts/QPS purchase-invoice agent, running as a macOS launchd daemon |
homebrew-tap |
Homebrew tap for the org's macOS tools |
Pull requests are welcome everywhere except the Stackweaver release mirrors. Start with CONTRIBUTING, ask questions through SUPPORT, and report vulnerabilities through SECURITY. Releases are signed with cosign keyless (Sigstore) and carry SLSA build provenance.
Licences vary per repository, see each LICENSE. Stackweaver™ is a trademark of VH & Co (policy). contact@vhco.pro