Package Infra Terraform

This package-level Terraform root is not an active deployment source.

The canonical Gateway Discord deployment terraform lives in cloud/services/gateway-discord/terraform (AWS / EKS). It is being retired as part of the AWS → Railway/Hetzner migration. See ../AWS_RETIREMENT.md for the staged retirement plan and current owner per stage.
The previous package-level duplicate AWS copy in legacy-gateway-discord-aws/ has been deleted (was a stale duplicate of the gateway-discord terraform, ~1.9k lines of dead Terraform).
The gcp/ roots are partial and are not wired to any CI workflow in this repository. Treat them as experimental until a consumer is added and documented.

Do not run Terraform from this directory expecting Gateway Discord infrastructure to change.

Current deployment topology

See ../RAILWAY.md for the canonical map of where each service runs today. Short version:

cloud-frontend → Cloudflare Pages.
cloud-api → Cloudflare Worker.
headscale, tunnel-proxy → Railway.
gateway-discord, gateway-webhook → Docker (target: Railway).
agent-server, per-customer compute → Hetzner via container-control-plane.
Database → Neon (Postgres).
Object storage → Cloudflare R2 (S3-compatible).
Secrets/KMS → local AES-256-GCM with SECRETS_MASTER_KEY; optional AWS KMS provider retained for callers that have already provisioned a key.

gcp/ — partial GKE / foundation modules, not currently wired to CI. Keep for future GCP experimentation.

That is it.