terraform-module-design SKILL.md skillA

terraform-module-design from jvoliveiran/constellation-harness is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add jvoliveiran/constellation-harness/terraform-module-design@git:20260708.0e0f20a

Pins git:20260708.0e0f20a in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 17 of 17 checks passed
Kind
SKILL.md skill
Repository
jvoliveiran/constellation-harness
Path
plugins/constellation-stack-infra/skills/terraform-module-design/SKILL.md
Versions recorded
1
Latest version
git:20260708.0e0f20a, committed Jul 8, 2026
Size
6,239 bytes
Repository stars
10
License
MIT

Designing reusable Terraform modules as composable building blocks — interface conventions, file layout, versioning, composition roots, validation, and testing — so software engineers can pick and wire blocks instead of designing infrastructure.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# Terraform Module Design (Reusable Building Blocks)

## Scope

Apply this skill whenever creating or reviewing a Terraform module intended for reuse, or a composition root that consumes such modules. The goal is a **module catalog**: each module owns one capability, exposes a small documented interface, and composes with the others — a developer deploying a backend service picks `docker-host` + `postgres`, not a bespoke design.

## One module, one capability

A module is a building block, not a bundle. Good module boundaries:

- `network` — VCN/VPC, subnets, gateways, base security rules
- `docker-host` — a VM that runs containers (compute + cloud-init + reserved IP + volume)
- `postgres` / `autonomous-db` — one database, its storage, its backup policy
- `secrets` — vault/secret container + the secrets an app consumes
- `dns-record`, `object-bucket`, `registry`, `load-balancer` — one each

If a module description needs "and", split it. Cross-capability wiring (the app host reading the DB endpoint) happens in the **composition root** via outputs → variables, never by one module reaching into another's resources.

## Standard layout

```
modules/<name>/
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add jvoliveiran/constellation-harness/terraform-module-design@sha256:c77a1798b35420f8

The line at the top of this page pins the label git:20260708.0e0f20a, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_3vuqzlzd6agnvslp.svg)](https://markdownregistry.com/a/art_3vuqzlzd6agnvslp)

4 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 1 version of this file, committed on Jul 8, 2026.

versioncommittedcommitsizeaudit
git:20260708.0e0f20a latest2026-07-08 0e0f20a 6,239 BA view

Audit of the latest version

A  17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (6239 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

jvoliveiran/constellation-harness · 10 stars · license MIT · pushed 2026-10-22 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_3vuqzlzd6agnvslp
GET https://markdownregistry.com/api/v1/resolve?ref=jvoliveiran/constellation-harness/terraform-module-design
GET https://markdownregistry.com/api/v1/blob/c77a1798b35420f82f9fc513947359f1a372587aa899787d214acb73016e8a8a

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from jvoliveiran/constellation-harness

AGENTS.md@docs/spikes/opencode-port AGENTS.md file
jvoliveiran/constellation-harness · docs/spikes/opencode-port/AGENTS.md
git:20260921.d132908 · audit A · 10 stars
frontend-design SKILL.md skill
jvoliveiran/constellation-harness · plugins/constellation-stack-frontend/skills/frontend-design/SKILL.md · Create distinctive, production-grade frontend interfaces with high design quality. Use this skill when the user asks to…
git:20260611.d17d9ad · audit A · 10 stars
cloud-accessory-services SKILL.md skill
jvoliveiran/constellation-harness · plugins/constellation-stack-infra/skills/cloud-accessory-services/SKILL.md · The services around the app — secrets (OCI Vault / AWS Secrets Manager), TLS certificates, DNS, container registries…
git:20260708.0e0f20a · audit A · 10 stars
oci-container-platform SKILL.md skill
jvoliveiran/constellation-harness · plugins/constellation-stack-infra/skills/oci-container-platform/SKILL.md · Running Docker containers and databases on OCI inside the Always Free tier — the AWS Lightsail equivalent built from…
git:20260708.0e0f20a · audit A · 10 stars
terraform-environments SKILL.md skill
jvoliveiran/constellation-harness · plugins/constellation-stack-infra/skills/terraform-environments/SKILL.md · Multi-environment Terraform — remote state backends (OCI Object Storage or S3), directory-per-environment layout…
git:20260708.0e0f20a · audit A · 10 stars
error-handling SKILL.md skill
jvoliveiran/constellation-harness · plugins/constellation-stack-node/skills/error-handling/SKILL.md · Domain exception hierarchy, error codes, GraphQL error formatting, and error logging standards for a NestJS + GraphQL…
git:20260610.47ec162 · audit A · 10 stars
graphql-federation SKILL.md skill
jvoliveiran/constellation-harness · plugins/constellation-stack-node/skills/graphql-federation/SKILL.md · How to build a graphql federated API approach, composing a supergraph based on subgraph graphql servers
git:20260610.47ec162 · audit A · 10 stars
graphql SKILL.md skill
jvoliveiran/constellation-harness · plugins/constellation-stack-node/skills/graphql/SKILL.md · How to use graphql with Nestjs and Typescript on a code-first approach
git:20260610.47ec162 · audit A · 10 stars
nestjs SKILL.md skill
jvoliveiran/constellation-harness · plugins/constellation-stack-node/skills/nestjs/SKILL.md · Most recommended practices and modules to use alongside with NestJS framework for backend development
git:20260610.47ec162 · audit A · 10 stars
observability SKILL.md skill
jvoliveiran/constellation-harness · plugins/constellation-stack-node/skills/observability/SKILL.md · Logging, tracing, and monitoring standards using Winston and OpenTelemetry in a NestJS + TypeScript backend
git:20260610.47ec162 · audit A · 10 stars
prisma-migrations SKILL.md skill
jvoliveiran/constellation-harness · plugins/constellation-stack-node/skills/prisma-migrations/SKILL.md · Best practices for Prisma schema changes, migrations, seeding, and rollback in a NestJS + TypeScript backend
git:20260610.47ec162 · audit A · 10 stars
schema-compatibility SKILL.md skill
jvoliveiran/constellation-harness · plugins/constellation-stack-node/skills/schema-compatibility/SKILL.md · Detect breaking vs safe changes in the auto-generated GraphQL schema to prevent downstream consumer breakage
git:20260610.47ec162 · audit A · 10 stars

Every file in jvoliveiran/constellation-harness

Browse by kind, by grade A, or by owner.