NetBird on Vultr, with Authentik

A Green workflow that turns one colors.yml into a running NetBird control plane: OpenTofu for the instance, its firewall and two Cloudflare records; Ansible for Traefik, the combined netbird-server, the dashboard and Authentik.

Verbs

./green build              # render .colors/<profile>/ — no provider calls, no credentials
./green create --dry-run   # walk the workflow, skip every side effect
./green create             # converge for real
./green delete             # guarded; needs a one-run override

Exit code 2 is validation or usage failure and lists every problem at once. The launcher walks up from the working directory to find colors.yml.

Compute provider