HarvTech

Showcase

Proof of practice.

Real infrastructure, in public repos. Every project here is live or in active development — the source code, the architecture decisions, and the honest record of what worked first time and what didn’t.

● Live

harvtech.co.uk — site & infrastructure

This site, built and operated in the open.

The full stack behind harvtech.co.uk — Astro + Tailwind static site served from Azure Storage $web, behind Front Door Standard with WAF custom rules and managed rule sets. Two Terraform stacks (site and DNS) with shared state in a dedicated platform resource group. GitHub Actions CI/CD federated to Azure via OIDC — no long-lived secrets anywhere in the pipeline. Security scanning on every PR: Checkov, Trivy, tflint, and Snyk Open Source, all emitting SARIF to GitHub Code Scanning.

Azure Terraform Astro Front Door + WAF GitHub Actions OIDC Checkov Trivy
● Live

Azure data platform

Medallion lakehouse on ADLS Gen2, Cosmos DB, Databricks, and Data Factory.

Reference IaC for an Azure data platform — ADLS Gen2 with a medallion architecture (raw, cleansed, curated layers), Cosmos DB on the free tier for operational data, Data Factory as orchestrator, and a Databricks Premium workspace. All storage hardened: local auth disabled, infrastructure encryption enabled, OAuth-only access, network rules. The platform stays under £1/month by deploying the resources without running active workloads — the Terraform patterns are the showcase, drawn from real-world data engineering delivery.

Azure Terraform ADLS Gen2 Databricks Cosmos DB Data Factory Entra ID
◌ In progress

Reference Azure landing zone

A production-grade landing zone in Terraform, with AI as a demonstrated workload.

A well-architected Azure landing zone in Terraform — hub-spoke networking, private endpoints throughout, Entra ID Conditional Access policies, Defender for Cloud with DINE policies, image scanning in CI, and WAF at the edge. AI (Azure OpenAI / Foundry) and data workloads drop in on top as demonstrated platform tenants. The goal is a reference architecture you can clone and adapt, not a contrived demo. Coming as a separate public repo with this site as its case-study home.

Azure Terraform Hub-spoke Entra ID Defender for Cloud Azure OpenAI WAF

Work with us

Need something like this for your organisation?

Every project above started with a conversation about the problem. Let’s have that conversation about yours.