# Terraform (cloud-agnostic scaffold)

**Cloud provider decision is pending** (AWS vs GCP vs Azure). Modules below are
placeholder interfaces — the concrete resource implementations (EKS/GKE/AKS,
managed Postgres, object storage, secrets manager) get filled in once the
provider is chosen, in Phase 6 of the build roadmap. Directory shape is
provider-agnostic so no restructuring is needed once decided.

- `modules/k8s-cluster` — managed Kubernetes cluster
- `modules/networking` — VPC/subnets/ingress networking
- `modules/managed-postgres` — managed Postgres instance
- `modules/object-storage` — bucket for PDF/raw artifacts, index backups
- `modules/secrets` — secrets manager integration
- `envs/{dev,staging,prod}` — per-environment root modules wiring the above