### Run Spacelift Installer

Source: https://docs.spacelift.io/self-hosted/v2.1.0/product/administration/install

This command runs the Spacelift installer, using an optional configuration file. The installer sets up the necessary infrastructure.  The `-c` flag allows you to specify the path to your configuration file; if omitted, it defaults to `config.json`. The example shows the initial confirmation prompt.

```bash
./install.sh [-c "<configuration file>"]

```

--------------------------------

### Ansible Playbook Execution

Source: https://docs.spacelift.io/self-hosted/v3.5.0/vendors/ansible/getting-started

Specifies the Ansible playbook file to be executed by Spacelift. Ensure this file exists in the configured repository.

```text
playbook.yml
```

--------------------------------

### Run Spacelift Installer

Source: https://docs.spacelift.io/self-hosted/latest/installing-spacelift/cloudformation/disaster-recovery

This command executes the Spacelift installer script.  It takes a configuration file (config.json) as input, which should include the necessary settings for the installation, particularly those related to disaster recovery.  This step is crucial for completing the DR setup after configuring S3 replication.

```shell
./install.sh -c config.json
```

--------------------------------

### Kubernetes Deployment YAML

Source: https://docs.spacelift.io/self-hosted/latest/vendors/kubernetes/getting-started

This YAML defines a basic Kubernetes Deployment for an Nginx application. It specifies the image to use (nginx:1.14.2), the number of replicas (2), and the container port (80). This configuration is used to create a stateless application deployment.

```yaml
apiVersion: apps/v1
kind: Deployment
metadata:
  name: nginx-deployment
spec:
  selector:
    matchLabels:
      app: nginx
  replicas: 2 # tells deployment to run 2 pods matching the template
  template:
    metadata:
      labels:
        app: nginx
    spec:
      containers:
      - name: nginx
        image: nginx:1.14.2
        ports:
        - containerPort: 80

```

--------------------------------

### Configure DNS Zone Entries

Source: https://docs.spacelift.io/self-hosted/latest/installing-spacelift/reference-architecture/guides/deploying-to-eks

Provides examples of CNAME records to be added to your DNS zone. These records point to the Spacelift server ingress and the MQTT broker, enabling access to your Spacelift installation.

```dns
# This one is the main address of your Spacelift installation.
# It should be a CNAME to the server-v4 ingress (see above).
${TF_VAR_server_domain}                    300 IN  CNAME     <lb-name>.<region>.elb.amazonaws.com

# This one is the address of your MQTT endpoint.
# It should be a CNAME to the external IP of the spacelift-mqtt service (see above).
${TF_VAR_mqtt_broker_domain}               300 IN  CNAME     <lb-name>.elb.<region>.amazonaws.com
```

--------------------------------

### Spacelift Runner Configuration

Source: https://docs.spacelift.io/self-hosted/v3.5.0/vendors/ansible/getting-started

Configuration for the Spacelift runner image and Ansible settings. This defines the container environment for running Ansible playbooks.

```yaml
runner_image: public.ecr.aws/spacelift/runner-ansible-aws:latest

environment:
  ANSIBLE_CONFIG: .ansible.cfg
  ANSIBLE_PRIVATE_KEY_FILE: /tmp/spacelift_key.pem
```

--------------------------------

### Create Teleport Machine ID Bot

Source: https://docs.spacelift.io/self-hosted/v3.2.0/integrations/teleport

This command creates a Teleport Machine ID bot named 'example' and assigns it the 'terraform-provider' role. This bot will be used by Spacelift to authenticate.

```bash
tctl bots add example --roles=terraform-provider --token=example-bot
# Expected output:
# bot "example" has been created
```

--------------------------------

### Create a Teleport Machine ID Bot

Source: https://docs.spacelift.io/integrations/teleport

This command creates a Machine ID bot named 'example'. It assigns the 'terraform-provider' role to the bot and uses the 'example-bot' token for authentication. This bot will be used by Spacelift to act as an authenticated user.

```bash
tctl bots add example --roles=terraform-provider --token=example-bot
```

--------------------------------

### Create Nginx Deployment with Kubernetes YAML

Source: https://docs.spacelift.io/self-hosted/v2.0.0/vendors/kubernetes/getting-started

YAML configuration file for deploying Nginx with 2 replicas on Kubernetes. This deployment manifest specifies the container image (nginx:1.14.2), port configuration (80), and replica count. Save this as deployment.yaml in your repository.

```yaml
apiVersion: apps/v1
kind: Deployment
metadata:
  name: nginx-deployment
spec:
  selector:
    matchLabels:
      app: nginx
  replicas: 2
  template:
    metadata:
      labels:
        app: nginx
    spec:
      containers:
      - name: nginx
        image: nginx:1.14.2
        ports:
        - containerPort: 80
```

--------------------------------

### Initialization Policy - Rego Example

Source: https://docs.spacelift.io/self-hosted/v3.0.0/concepts/policy/run-initialization-policy

This Rego code defines a simple initialization policy that denies all runs. It uses a single 'deny' rule with a string message, which will fail the run before it starts. This policy can protect a stack from unwanted changes or enforce organizational rules.

```rego
package spacelift

deny["you shall not pass"] {
  true
}

```

--------------------------------

### Configure Spacelift Stack for Pulumi

Source: https://docs.spacelift.io/self-hosted/v2.0.0/vendors/pulumi/javascript

Configuration details for a Spacelift stack using Pulumi. This includes setting the project root, installing dependencies, specifying the runner image, and configuring the state backend and stack name.

```bash
project_root: aws-js-webserver
before_init:
  - npm install
runner_image: public.ecr.aws/spacelift/runner-pulumi-javascript:latest
pulumi_version_tag: v2.15.4
state_backend: s3://pulumi-state-bucket
stack_name: my-javascript-pulumi-spacelift-stack
```

--------------------------------

### Authenticate and list Spacelift stacks with spacectl

Source: https://docs.spacelift.io/self-hosted/latest/concepts/spacectl

Provides a quick start guide for authenticating with Spacelift using `spacectl profile login` and then listing available stacks. It shows an interactive login process and the output of the `spacectl stack list` command.

```bash
> spacectl profile login my-account
Enter Spacelift endpoint (eg. https://unicorn.app.spacelift.io/): http://my-account.app.spacelift.tf
Select authentication flow:
  1) for API key,
  2) for GitHub access token,
  3) for login with a web browser
Option: 3

> spacectl stack list
Name                          | Commit   | Author        | State     | Worker Pool | Locked By
stack-1                       | 1aa0ef62 | Adam Connelly | NONE      |             |
stack-2                       | 1aa0ef62 | Adam Connelly | DISCARDED |             |
```

--------------------------------

### Configure Spacelift Stack for Pulumi Javascript

Source: https://docs.spacelift.io/self-hosted/v2.1.0/vendors/pulumi/javascript

Configuration details for a Spacelift stack using Pulumi with Javascript. This includes setting the project root to the specific subdirectory, defining the npm install script, specifying the runner image, and optionally pinning a Pulumi version.

```text
Project root: `aws-js-webserver`
Before init script: `npm install`
Runner image: `public.ecr.aws/spacelift/runner-pulumi-javascript:latest`
Pulumi version tag: `v2.15.4` (example)
```

--------------------------------

### Ansible Inventory Configuration

Source: https://docs.spacelift.io/self-hosted/v3.5.0/vendors/ansible/getting-started

Example of an AWS EC2 inventory file used by Ansible to discover hosts. Users can modify filters to match their specific EC2 instances.

```yaml
plugin: aws_ec2
regions:
  - us-east-1
filters:
  tag: Environment: production
compose:
  ansible_host: public_ip_address
```

--------------------------------

### Basic Spacelift Blueprint YAML Configuration

Source: https://docs.spacelift.io/concepts/blueprint

This YAML configuration defines a basic Spacelift Blueprint. It includes input variables, stack settings like name and VCS configuration, and vendor settings for Terraform. This serves as a minimal example to get started with creating blueprints.

```yaml
inputs:
  - id: stack_name
    name: Stack name
stack:
  name: "${{ inputs.stack_name }}"
  space: root
  vcs:
    branch: main
    repository: my-repository
    provider: GITHUB
  vendor:
    terraform:
      manage_state: true
      version: "1.3.0"
```

--------------------------------

### Usage of setup-spacectl GitHub Action

Source: https://docs.spacelift.io/concepts/spacectl

Demonstrates how to use the `setup-spacectl` GitHub Action to install `spacectl` in a GitHub Actions workflow and then deploy infrastructure. Requires setting Spacelift API credentials as environment variables.

```yaml
steps:
  - name: Install spacectl
    uses: spacelift-io/setup-spacectl@main

  - name: Deploy infrastructure
    env:
      SPACELIFT_API_KEY_ENDPOINT: https://mycorp.app.spacelift.io
      SPACELIFT_API_KEY_ID: ${{ secrets.SPACELIFT_API_KEY_ID }}
      SPACELIFT_API_KEY_SECRET: ${{ secrets.SPACELIFT_API_KEY_SECRET }}
    run: spacectl stack deploy --id my-infra-stack
```

--------------------------------

### Installer Confirmation Prompt

Source: https://docs.spacelift.io/self-hosted/v2.1.0/product/administration/install

This is an example of the confirmation prompt displayed by the installer, asking for explicit permission to proceed with the installation process.  It's crucial to verify the AWS account ID before confirming. Entering 'yes' is required to continue.

```text
./install.sh
[2023-01-24T12:17:52+0000] INFO: installing version v0.0.6 of Spacelift into AWS account 123456789012

Are you sure you want to continue? Only 'yes' will be accepted: yes

```

--------------------------------

### Apply OpenTofu Configuration and View Output

Source: https://docs.spacelift.io/self-hosted/v3.3.0/installing-spacelift/reference-architecture/guides/deploying-to-ecs

This demonstrates how to apply the OpenTofu configuration and view the output. The output contains the DNS records required for ACM certificate validation.  The user must then manually create these records in their DNS zone. Replace `spacelift.example.com` with your server domain.

```Bash
$ TF_VAR_server_domain=spacelift.example.com tofu apply

# [...]

Outputs:

certificate-verification-records = <<EOT
ℹ️  Please create the following entries in your DNS zone

_68bc8119c6de5687c7a671e64af8013d.spacelift.example.com. 3600 IN CNAME _abcdef1234567896e93aa2f43cb67bce.xlxgrxvvxj.acm-validations.aws.

EOT

```

--------------------------------

### Create Blueprint - Comprehensive YAML Example

Source: https://docs.spacelift.io/self-hosted/v3.0.0/concepts/blueprint

This detailed YAML example showcases the comprehensive configuration options available for blueprints. It includes various input types, stack settings, environment variables, attachments, hooks, and more. It offers a broad overview of the features available when creating and managing stacks within Spacelift.

```YAML
inputs:
  - id: environment
    name: Environment to deploy to
    # type is not mandatory, defaults to short_text
  - id: app
    name: App name (used for naming convention)
    type: short_text
  - id: description
    name: Description of the stack
    type: long_text
    # long_text means you'll have a bigger text area in the UI
  - id: connstring
    name: Connection string to the database
    type: secret
    # secret means the input will be masked in the UI
  - id: tf_version
    name: Terraform version of the stack
    type: select
    options:
      - "1.3.0"
      - "1.4.6"
      - "1.5.0"
  - id: manage_state
    name: Should Spacelift manage the state of Terraform
    default: true
    type: boolean
  - id: destroy_task_epoch
    name: Epoch timestamp of when to destroy the resources
    type: number
options:
  # If true, a tracked run will be triggered right after the stack is created
  trigger_run: true
  # If true, the stack will not be created, useful when using inputs and multiple stacks in a single template.
  do_not_create: false
stack:
  name: ${{ inputs.app }}-{{ inputs.environment }}-stack
  space: root
  # The single-quote is needed to avoid YAML parsing errors since the question mark
  # and the colon are reserved characters in YAML.
  description: '${{ inputs.environment == "prod" ? "Production stack" : "Non-production stack" }}. Stack created at ${{ string(context.time) }}.'
  is_disabled: ${{ inputs.environment != 'prod' }}
  labels:
    - Environment/${{ inputs.environment }}
    - Vendor/Terraform
    - Owner/${{ context.user.login }}
    - Blueprint/${{ context.blueprint.name }}
    - Space/${{ context.blueprint.space }}
  administrative: false
  allow_promotion: false
  auto_deploy: false
  auto_retry: false
  local_preview_enabled: true
  secret_masking_enabled: true
  protect_from_deletion: false
  runner_image: public.ecr.aws/mycorp/spacelift-runner:latest
  worker_pool: 01GQ29K8SYXKZVHPZ4HG00BK2E
  attachments:
    contexts:
      - id: my-first-context-vnfq2
        priority: 1
    clouds:
      aws:
        id: 01GQ29K8SYXKZVHPZ4HG00BK2E
        read: true
        write: true
      azure:
        id: 01GQ29K8SYXKZVHPZ4HG00BK2E
        read: true
        write: true
        subscription_id: 12345678-1234-1234-1234-123456789012
    policies:
      - my-push-policy-1
      - my-approval-policy-1
  environment:
    variables:
      - name: MY_ENV_VAR
        value: my-env-var-value
        description: This is my non-encrypted environment variable
      - name: TF_VAR_CONNECTION_STRING
        value: ${{ inputs.connstring }}
        description: The connection string to the database
        secret: true
    mounted_files:
      - path: a.json
        content: |
          {
            "a": "b"
          }
        description: This is the configuration of x feature
        secret: true
  hooks:
    apply:
      before: ["sh", "-c", "echo 'before apply'"]
      after: ["sh", "-c", "echo 'after apply'"]
    init:
      before: ["sh", "-c", "echo 'before init'"]
      after: ["sh", "-c", "echo 'after init'"]
    plan:
      before: ["sh", "-c", "echo 'before plan'"]
```

--------------------------------

### Deploy EC2 Worker Pool with Custom User Data Secret

Source: https://docs.spacelift.io/self-hosted/v3.1.0/concepts/worker-pools/docker-based-workers

CloudFormation deployment command that injects custom shell scripts from AWS Secrets Manager into EC2 instances during startup. The CustomUserDataSecretName parameter references a secret containing valid shell commands for software installation, environment setup, or custom initialization tasks.

```bash
aws cloudformation deploy --no-cli-pager \
  --stack-name spacelift-default-worker-pool \
  --template-file "cloudformation/workerpool.yaml" \
  --region "eu-west-1" \
  --parameter-overrides \
    CustomUserDataSecretName="spacelift/userdata" \
  [...]
```

--------------------------------

### Example Base64 Encoded Certificate for Spacelift

Source: https://docs.spacelift.io/self-hosted/v3.6.0/installing-spacelift/cloudformation/advanced-installations

An example of a single base64-encoded certificate, formatted for use within the `ca_certificates` array in Spacelift's configuration.

```text
-----BEGIN CERTIFICATE-----
MIIFsTCCA5mgAwIBAgIUDD/4VBfLx5K/tAY+SckH05TJ8i8wDQYJKoZIhvcNAQEL
BQAwaDELMAkGA1UEBhMCR0IxETAPBgNVBAgMCFNjb3RsYW5kMRAwDgYDVQQHDAdH
 bGFzZ293MRkwFwYDVQQKDBBBZGFtIEMgUm91dCBDQSAxMRkwFwYDVQQDDBBBZGFt
 IEMgUm91dCBDQSAxMB4XDTIzMDMxMzExMzYxMVoXDTI1MTMyMTExMzYxMVowaDEL
 MAkGA1UEBhMCR0IxETAPBgNVBAgMCFNjb3RsYW5kMRAwDgYDVQQHDAdHbGFzZ293
 MRkwFwYDVQQKDBBBZGFtIEMgUm91dCBDQSAxMRkwFwYDVQQDDBBBZGFtIEMgUm9v
 dCBDQSAxMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxjv/+sInXiQ+
 2Fb+itF8ndlpmmYUoZwYN4dx+2wrcbOVngTvy4sE+33nGBzH4vt4pOhKTWwaYXFI
 0CzqoIoazi8Zl0medyrwtIUDZ1pNcVugb4KAFb9Jbq40Ik3xG6t16maxQJGTiAG2
 /xVtsuYdhnBGx//61SEbEwSpR145/Qf1cba8RlRQMz4QUWNe8XXo3SYaX2kxiw2V
 1Op+fQxg2jf1AyzQXX1ch1jyG5RLESPUMFkBiQwi7LOSCaavfJEUzwqeoORgd7Ti
 uyMV+4Gsb1XAnK7KXYwisGeP5/QNFPAByfAdPjR20rMYYHfxqEDth4Najjmu/iyF
 PGrGqCobRhitTtJXT/QxWcvtrRu1BCVnedyESMyiya4Q9dn27rFjjg3ZARqWOZhyq
 OTWHo2mO2FzEJuxhvYNe2iYVp2s8wMTB02nP3wpWoYwje2yDwcjkIl8uXKzEZ9Gf
 FATJaCLoO8o5J2HXsgOIqXlpzU9tUtEew/xTzZqX5A34o8/+NgUtm0F7joWa5mDC
 QB7L8cKfACydfpekJx/gFUGSy/5vdfBzOczc6Bmh66yHPBRDcgyDFnnx34m/XVQa
 rBwwIDDbqu3sscdOgm9v8csCJd0YlXGb/x4oAA61IITnsNd9NCw0GJIquSEcYiCE
A0YrQTKVfRAXuhSZ1VPIuxXiF2K3XTMCAwEAAaNTMFEwHQYDVR0OBBYEFD55R4mt
 0hNOJUgPL0JBKZB1jybSMB8GA1UdIwQYMBaAFD55R4mt0hNOJUgPL0JBKZB1jybS
 MA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggIBAHecVjMklTkS2Py5
 XNpJ9cdzG66GuPDw8aQZIunrxqYud74CA1Y0K26kyDJkLnWzVa7nT+F0d8Qn3tov
 vFwI3xy5l+4upmuZ3u1jFEMiSk8C2FPohLDnDo3rwEUCGvJ6a4Gas7YyHPGL3DrJ
 0dcu9wsX9cYB2YJ27QosZ5s6zmmUvBGTI30JNvPnSoC7kzqD3ArxvTEW9WaUqoJt
 88lsMnn6+ps9A6exb/fK909ZWaEJWRd9cdMET0fna7EhhkO+Cqz415RgMxlK7ggT
 97CvkjvvLNeFT5naHbzUANqfMVRRcUaP3PjTC9z5cDo9CaPaFjV/+Uxax2mAlARk
 fqYyWoqvZH90czpvFG1jUo6P4NpyxZS8layJwD24qX+EON43WYApLsl/jE2A/JmQ
 MdqWNhOy4HP8U8+aANr0Ev7gWWNi6VcR8T6PT/rbAGjnPmVmoZ4rc7CdoS8ZQZJh
 K8ELA17+pnMTgo7wxfARqL+p+mqgtUxRbiWitev8F2hUVB/SwP8hpcGrdhTEN7td
 pSW1ykPeGJFKSBo5QHanqqPFCzqtFeoL9DhYx5/xE6FpKMLg3vVcFsHu6glS8iMV
 4Hvb2fXuhXxLTBCbD1+5lLP/bHXogQKmp2H6Oj0e6WBmQ0xqGou4Il6bavsZCx2v
 ADWvlue5jXdNu5xPZdsNVNAluAne
-----END CERTIFICATE-----
```

--------------------------------

### Example Base64 Encoded Certificate for Spacelift

Source: https://docs.spacelift.io/self-hosted/v2.3.0/product/administration/advanced-installations

This is an example of a base64-encoded X.509 certificate, which should be provided on a single line within the `ca_certificates` array in the Spacelift configuration.

```text
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
```

--------------------------------

### Extract and Navigate to Release Directory

Source: https://docs.spacelift.io/self-hosted/latest/installing-spacelift/cloudformation/install

Extracts the Spacelift release archive and navigates into the extracted directory. This prepares the files for configuration and installation, replacing `<version>` with the actual version number.

```bash
tar -zxf self-hosted-<version>.tar.gz
cd self-hosted-<version>
```

--------------------------------

### Spacelift Workflow Hooks Example (Bash)

Source: https://docs.spacelift.io/self-hosted/v3.0.0/concepts/stack/stack-settings

Demonstrates how to use 'before' and 'after' hooks in Spacelift workflows. Commands executed in 'before' hooks run prior to the phase, and 'after' hooks run after. The example shows listing processes before and after a phase, and then listing Terraform's `.terraform` directory after.

```bash
echo "ps aux"
terraform plan
echo "ls -la .terraform"
```

--------------------------------

### Source Environment Variables for Spacelift Installation

Source: https://docs.spacelift.io/self-hosted/latest/installing-spacelift/reference-architecture/guides/deploying-to-eks

This command sources environment variables required for the Spacelift installation process. It utilizes the 'tofu output -raw shell' command to retrieve and export these variables, which are essential for subsequent steps in the guide. Ensure you keep the same shell open throughout the installation.

```bash
$(tofu output -raw shell)
```

--------------------------------

### Example AWS S3 Website URL Fetch

Source: https://docs.spacelift.io/self-hosted/latest/vendors/pulumi/golang

Demonstrates how to fetch the content of a deployed S3 static website using `curl`. This verifies the website is accessible via its S3 website endpoint.

```bash
~> curl s3-website-bucket-b47a23a.s3-website.eu-central-1.amazonaws.com
<html><head>
    <title>Hello Amazon S3</title><meta charset="UTF-8">
    <link rel="shortcut icon" href="/favicon.png" type="image/png">
</head>
<body><p>Hello, world!</p><p>Made with ❤️ with <a href="https://pulumi.com">Pulumi</a></p>
</body></html>

```

--------------------------------

### Start Services in Secondary Region (Shell)

Source: https://docs.spacelift.io/self-hosted/latest/installing-spacelift/cloudformation/disaster-recovery

Starts services in the secondary region for disaster recovery failover. It requires a configuration file specific to the disaster recovery setup. Ensure the database is ready before execution.

```shell
./start-stop-services.sh -e true -c config.dr.json
```

--------------------------------

### Spacelift Workflow Hooks Example (Bash)

Source: https://docs.spacelift.io/self-hosted/v2.2.0/concepts/stack/stack-settings

This example demonstrates how to use Spacelift workflow hooks to execute commands before and after a specific phase. It includes 'before' hooks for setting up and 'after' hooks for verification. Commands are chained using '&&' to ensure proper execution flow.

```bash
# Example showing 'before' and 'after' hooks for a phase
# The 'before' hooks run before the main phase command
# The 'after' hooks run after the main phase command, only if it succeeds
# Commands like 'ps aux' and 'ls' are executed as 'before' hooks
# Commands like 'ls -la .terraform' are executed as 'after' hooks
```

--------------------------------

### Example Certificate (Base64 Encoded)

Source: https://docs.spacelift.io/self-hosted/v2.2.0/product/administration/advanced-installations

This is a base64 encoded string representing a sample certificate. It is provided as an example and should not be used in production environments without proper validation and replacement.

```base64
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
```

--------------------------------

### Install Dependencies with npm

Source: https://docs.spacelift.io/self-hosted/v2.0.0/vendors/pulumi/javascript

This script installs all necessary Node.js dependencies for the Pulumi project before initialization. It ensures that all required packages are available in the workspace for subsequent Pulumi operations.

```bash
npm install
```

--------------------------------

### Create Slack App Manifest Example

Source: https://docs.spacelift.io/self-hosted/v3.5.0/installing-spacelift/reference-architecture/reference/slack

This JSON manifest is used to create a Slack app for integration with Spacelift. Replace `<your-domain>` with the domain hosting your self-hosted Spacelift instance.  The app configuration includes display information, bot features, OAuth settings, and event subscriptions required for Spacelift to communicate with Slack.

```json
{
  "display_information": {
    "name": "Spacelift",
    "description": "Taking your infra-as-code to the next level",
    "background_color": "#131417",
    "long_description": "Spacelift is a sophisticated and compliant infrastructure delivery platform for Terraform (including Terragrunt), Pulumi, CloudFormation, Ansible, and Kubernetes.\r\n\r\n• No lock-in. Under the hood, Spacelift uses your choice of Infrastructure as Code providers: open-source projects with vibrant ecosystems and a multitude of existing providers, modules, and tutorials.\r\n\r\n• Works with your Git flow. Spacelift integrates with GitHub (and other VCSes) to provide feedback on commits and Pull Requests, allowing you and your team to preview the changes before they are applied.\r\n\r\n• Drift detection. Spacelift natively detects drift, and can optionally revert it, to provide visibility and awareness to those \"changes\" that will inevitably happen.\r\n\r\n• Policy as a Code. With Open Policy Agent (OPA) Rego, you can programmatically define policies, approval flows, and various decision points within your Infrastructure as Code flow.\r\n\r\n• Customize your runtime. Spacelift uses Docker to run its workflows, which allows you to fully control your execution environment.\r\n\r\n• Share config using contexts. Spacelift contexts are collections of configuration files and environment variables that can be attached to multiple stacks.\r\n\r\n• Look ma, no credentials. Spacelift integrates with identity management systems from major cloud providers; AWS, Azure, and Google Cloud, allowing you to set up limited temporary access to your resources without the need to supply powerful static credentials.\r\n\r\n• Manage programmatically. With the Terraform provider, you can manage Spacelift resources as code.\r\n\r\n• Protect your state. Spacelift supports a sophisticated state backend and can optionally manage the state on your behalf."
  },
  "features": {
    "bot_user": {
      "display_name": "Spacelift",
      "always_online": true
    },
    "slash_commands": [
      {
        "command": "/spacelift",
        "url": "https://<your-domain>/webhooks/slack",
        "description": "Get notified about Spacelift events",
        "usage_hint": "subscribe, unsubscribe or help",
        "should_escape": false
      }
    ]
  },
  "oauth_config": {
    "redirect_urls": ["https://<your-domain>/slack_oauth"],
    "scopes": {
      "bot": [
        "channels:read",
        "chat:write",
        "chat:write.public",
        "commands",
        "links:write",
        "team:read",
        "users:read"
      ]
    }
  },
  "settings": {
    "event_subscriptions": {
      "request_url": "https://<your-domain>/webhooks/slack",
      "bot_events": ["app_uninstalled"]
    },
    "interactivity": {
      "is_enabled": true,
      "request_url": "https://<your-domain>/webhooks/slack"
    },
    "org_deploy_enabled": false,
    "socket_mode_enabled": false,
    "token_rotation_enabled": false
  }
}

```

--------------------------------

### Example Web Server Output

Source: https://docs.spacelift.io/self-hosted/v2.2.0/vendors/pulumi/javascript

This snippet shows a successful curl command to a deployed web server, demonstrating the 'Hello, World!' output. It verifies the web server is accessible via its public hostname.

```bash
~> curl ec2-18-184-240-9.eu-central-1.compute.amazonaws.com
Hello, World!

```