Products

Two Terraform packages for shipping .NET on Azure.

Both are complete, working infrastructure — not starter snippets. One is for a small team with nobody spare to run infrastructure; the other is for a developer launching on their own. Pick by which of those you are, not by the price.


Fortress — an Azure environment by Stratis Dermanoutsos

Fortress

A production-ready Azure platform for your .NET product, on day one.

For a small team launching a product, with nobody spare to run infrastructure.

Keep your team on your product, not on Azure networking. The hard decisions are already made, and every one is written down.

What’s in the box

  • Your API, running and reachable. Easy to add more.
  • A static site for your front end. Easy to add more.
  • PostgreSQL only your app can reach.
  • One vault. Nothing in your repo or pipeline.
  • Your app built once as a container image, then promoted as-is.
  • Every decision written down.
  • dev, staging and prod, with a gate before each promotion.
  • One way in, TLS issued and renewed for you.

Launch price€249early access€19920% off

early-access price, one-time payment

Tell me when it launches
The specifics, if you’re the one who’ll run it

The front door. Azure Front Door, with a WAF policy and managed TLS certificates. On Standard the app keeps a public address locked to Front Door traffic only — a strong control rather than an invisible one. Premium swaps that for a fully private origin, at a materially higher monthly cost.

The database. PostgreSQL Flexible Server behind a private endpoint, with the DNS wiring that makes the name resolve from inside your network and nowhere else.

The secrets. Azure Key Vault, read at runtime through a managed identity. There is no secret to rotate in the pipeline because there is no secret in the pipeline.

The pipeline. GitHub Actions builds one container image and pushes it to Azure Container Registry. That same image is promoted through dev, staging and prod, with a gate before each promotion. One parameterised stack, separate state per environment, and OIDC instead of stored credentials.

Outpost — an Azure environment by Stratis Dermanoutsos

Outpost

The essentials for a .NET app on Azure, set up and written down.

For a developer launching on their own.

Spend your own time on the app, not on the Azure underneath it. That part is already decided, wired up and written down — you start from a working environment, not a blank subscription.

What’s in the box

  • Your API, running and reachable.
  • A static site for your front end.
  • PostgreSQL only your app can reach.
  • One vault. Nothing in your repo or pipeline.
  • Every merge to main builds your code and deploys it. No containers to manage.
  • Every decision written down.

€49

at launch, one-time payment

Tell me when it launches

Both packages

What ships either way.

  • AI skills ship inside every package

    A SKILL.md summary and router, plus a references/ set of single-topic deep dives explaining every decision baked into the templates. Your AI assistant already knows this infrastructure — ask it to explain, extend, or debug any part of it, which is the difference between a template you read once and one you keep using.

  • Free updates for 12 months

    Provider upgrades, Azure API changes and fixes, each released as a new version of the zip. After 12 months the updates stop; the code is still yours.

  • Delivered as a zip

    The Terraform code, the documentation and the AI skills, in one zip. Put them in your own repository and build from there.

  • No consulting time bundled

    The price is the code. If you want my time on top of it, that is €120 an hour.

  • Terraform, not Bicep

    Both packages are Terraform. If your team is standardised on Bicep, these are not for you.


Early access

Get notified when the packages launch.

One email when a package is ready to buy, and nothing else. No newsletter, no cadence to break — if there is nothing to say, you hear nothing.

The list gets Fortress at the early-access price:

  • Fortress€199instead of €249

Bigger than a package

Need the full enterprise version?

Management groups, policy, multiple subscriptions, hub-and-spoke networking, an identity model that survives an audit — that is an engagement, not a download. It is a different piece of work with a different shape.

Azure landing zone engagement →