Following the licensing shift of Terraform, OpenTofu has emerged as a viable open-source alternative under the Linux Foundation. We are adopting OpenTofu for new projects to ensure long-term freedom from restrictive commercial terms. As a near drop-in replacement, it supports most of our existing Terraform state files and modules, making it a low-risk migration path for clients prioritizing open governance.
By using HCL (HashiCorp Configuration Language), we define modules that enforce security baselines such as private endpoints for databases or specific IAM roles, ensuring that every deployed environment is compliant by default. We manage state remotely (e.g. with Azure Storage or S3-compatible backends) to enable collaboration and locking.