Terraform Skill

Battle-tested fixes for Terraform provisioning failures that waste hours in multi-environment setups. Covers the specific races and config traps that break fresh deploys: cloud-init timing issues, SSH connection conflicts during file transfers, Cloudflare API token format errors that only surface in staging, hardcoded domains in Caddyfiles causing cert failures, and the init-data-only-once problem with Casdoor OAuth. Every trap includes the exact error message you'll see and a copy-paste fix. Honest take: this reads like someone's incident post-mortems turned into a runbook, which makes it way more useful than generic Terraform advice. Activate it when you're debugging containers stuck in Restarting state after apply or setting up a second environment that mysteriously breaks differently than production.

skills.sh installs: 746
GitHub stars: 1.5K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add daymade/claude-code-skills --skill terraform-skill --agent claude-code

Installs into .claude/skills of the current project.

Files

Terraform Release and Provisioner Safety

Prevent a valid-looking Terraform workflow from publishing unvalidated bytes or widening a change's blast radius. Keep the user's business outcome and the actual mutation surface ahead of plan counts, green wrappers, or process completeness.

Route the task

Release, restoration, shared gateway, saved plan, staging receipt, or production promotion: read release-safety-and-environment-parity.md and pre-deploy-validation.md before approval or mutation.
Environment isolation, including cached initialization, environment retirement, shared data backend, DNS ownership, state, or snapshots: read multi-env-isolation.md.
Pre-deploy checks or a validator: read pre-deploy-validation.md.
Fresh instance or empty data disk: read zero-to-deploy-checklist.md.
One known provisioner symptom: use the matching pattern below.