Build Logs
Working notes from projects you actually build and operate.
Covers peraleslab.com’s own infrastructure — Terraform, GitHub Actions with OIDC, S3, and CloudFront — the pensieve-blog pipeline, and other systems actually running in production. IaC and Terraform content lives here as part of the “how I built this” narrative, rather than as its own section.
Building peraleslab.com: Hugo + S3 + CloudFront + Terraform
This site is a working example of its subject matter. A Hugo static site hosted on S3 and delivered by CloudFront. TLS via ACM with Cloudflare DNS. Deployed on every push with GitHub Actions using OIDC — no stored credentials. The entire stack is fully defined in Terraform.
Adopting Existing AWS Infrastructure into Terraform
A practical approach to importing, refactoring, and stabilizing existing resources.
OIDC Deploy Pipelines with GitHub Actions and AWS
Use GitHub's OIDC provider to assume roles in AWS securely — no long-lived credentials.