Infrastructure automation should make every important boundary easier to see.
ainfra validates inputs before mutation, binds apply to an exact reviewed
plan, keeps secrets out of ordinary outputs, and makes teardown a first-class
operation.
Contract driven
Strict JSON Schema contracts define template capabilities, inputs, and non-secret outputs. Unknown fields and unsupported versions fail closed.
Security first
Private networking, deliberate public-address allocation, verified SSH trust, pinned dependencies, and local security gates are defaults rather than afterthoughts.
Direct tools stay visible
OpenTofu owns infrastructure state. Ansible owns host configuration. ainfra
orchestrates them without inventing a hidden infrastructure language.
Start disposable. Keep teardown ready.
The first reference template provisions a Kubernetes-ready Debian baseline on Hetzner Cloud. Plan, verify, apply, configure, and destroy it through explicit local commands.