Circuit Builder
Pick the parts. Get a config you can run.
Choose a distribution and the circuits you want on a group of servers. You get a main.tf with each circuit pinned to its release, passwords kept out of it, and the firewall opened for what you picked. It's written in your browser, and nothing you type leaves it.