# IDE rules for DevOps and infrastructure Rules for DevOps and infrastructure: what each one does, an install command and example prompts. 40 cards - HTML: https://affpapa.org/en/nevibecode/rules/topic/devops - Instructions for agents: https://affpapa.org/en/nevibecode/agents.md - [terraform-azure](https://affpapa.org/en/nevibecode/rules/terraform-azure.md) — rule (official GitHub) · github · GitHub Copilot · ★ 40418 — A Copilot rule that sets file layout, Azure Verified Modules and hard limits for Terraform work on Azure, including a ban on secrets in state. - [shell](https://affpapa.org/en/nevibecode/rules/shell.md) — rule (official GitHub) · github · GitHub Copilot · ★ 40418 — A rule that makes GitHub Copilot generate clean, safe shell scripts. - [powershell](https://affpapa.org/en/nevibecode/rules/powershell.md) — rule (official GitHub) · github · GitHub Copilot · ★ 40418 — A GitHub Copilot rule that pushes it toward idiomatic PowerShell scripts following Microsoft's cmdlet guidelines. - [power-bi-devops-alm-best-practices](https://affpapa.org/en/nevibecode/rules/power-bi-devops-alm-best-practices.md) — rule (official GitHub) · github · GitHub Copilot · ★ 40418 — A GitHub Copilot rule that steers the agent through Power BI version control, CI/CD pipelines and multi-stage deployment. - [no-heredoc](https://affpapa.org/en/nevibecode/rules/no-heredoc.md) — rule (official GitHub) · github · GitHub Copilot · ★ 40418 — A rule that stops the agent from writing files through terminal heredocs and redirections, because those commands corrupt content in VS Code. - [java-upgrade](https://affpapa.org/en/nevibecode/rules/java-upgrade.md) — rule (official GitHub) · github · GitHub Copilot · ★ 40418 — A rule that points Copilot at the java-upgrade skill whenever you change the Java version in Maven or Gradle files. - [github-actions-ci-cd-best-practices](https://affpapa.org/en/nevibecode/rules/github-actions-ci-cd-best-practices.md) — rule (official GitHub) · github · GitHub Copilot · ★ 40418 — A GitHub Copilot rule that guides workflow structure, token permissions, caching and matrix setups whenever you touch files under .github/workflows/. - [devops-core-principles](https://affpapa.org/en/nevibecode/rules/devops-core-principles.md) — rule (official GitHub) · github · GitHub Copilot · ★ 40418 — Guides GitHub Copilot on CALMS principles, DORA metrics, and delivery automation across CI/CD pipelines and infrastructure as code. - [devbox-image-definition](https://affpapa.org/en/nevibecode/rules/devbox-image-definition.md) — rule (official GitHub) · github · GitHub Copilot · ★ 40418 — A GitHub Copilot rule that helps you write YAML image definition files for Microsoft Dev Box Team Customizations. - [containerization-docker-best-practices](https://affpapa.org/en/nevibecode/rules/containerization-docker-best-practices.md) — rule (official GitHub) · github · GitHub Copilot · ★ 40418 — Guides Docker image creation with rules for multi-stage builds, process isolation, environment portability, and minimal runtime footprints. - [cmake-vcpkg](https://affpapa.org/en/nevibecode/rules/cmake-vcpkg.md) — rule (official GitHub) · github · GitHub Copilot · ★ 40418 — A rule that gives Copilot the context of a C++ project: vcpkg in manifest mode, settings through CMakePresets.json, builds for MSVC, Clang and GCC. - [centos-linux](https://affpapa.org/en/nevibecode/rules/centos-linux.md) — rule (official GitHub) · github · GitHub Copilot · ★ 40418 — This rule guides CentOS administration, package work, systemd, firewalld, and SELinux. - [bicep-code-best-practices](https://affpapa.org/en/nevibecode/rules/bicep-code-best-practices.md) — rule (official GitHub) · github · GitHub Copilot · ★ 40418 — This rule guides GitHub Copilot when editing Bicep files, covering naming, parameters, resource references, and outputs. - [azure-verified-modules-bicep](https://affpapa.org/en/nevibecode/rules/azure-verified-modules-bicep.md) — rule (official GitHub) · github · GitHub Copilot · ★ 40418 — Instructs GitHub Copilot to use Azure Verified Modules when writing Bicep templates. - [azure-naming](https://affpapa.org/en/nevibecode/rules/azure-naming.md) — rule (official GitHub) · github · GitHub Copilot · ★ 40418 — The rule makes GitHub Copilot name Azure resources following Microsoft CAF: type prefix, workload, environment, region, instance number. - [azure-iot-edge-architecture](https://affpapa.org/en/nevibecode/rules/azure-iot-edge-architecture.md) — rule (official GitHub) · github · GitHub Copilot · ★ 40418 — Requires reviewing Azure IoT Edge documentation before proposing architectures. - [azure-devops-pipelines](https://affpapa.org/en/nevibecode/rules/azure-devops-pipelines.md) — rule (official GitHub) · github · GitHub Copilot · ★ 40418 — This rule guides Azure DevOps Pipeline YAML structure, testing, security, and deployment. - [aspnet-rest-apis](https://affpapa.org/en/nevibecode/rules/aspnet-rest-apis.md) — rule (official GitHub) · github · GitHub Copilot · ★ 40418 — Guides GitHub Copilot in building ASP.NET Core 10 REST APIs, contrasting controllers with Minimal APIs. - [arch-linux](https://affpapa.org/en/nevibecode/rules/arch-linux.md) — rule (official GitHub) · github · GitHub Copilot · ★ 40418 — This rule guides GitHub Copilot when it writes Arch Linux instructions, scripts, or documentation. - [ansible](https://affpapa.org/en/nevibecode/rules/ansible.md) — rule (official GitHub) · github · GitHub Copilot · ★ 40418 — Sets standards for Ansible playbooks: task naming rules, FQCN module paths, Ansible Vault secret separation, and validation via ansible-lint. - [netlify-official-cursorrules-prompt-file](https://affpapa.org/en/nevibecode/rules/netlify-official-cursorrules-prompt-file.md) — rule · PatrickJS · Cursor · ★ 41011 — A Cursor rule that hands the agent Netlify's official conventions: function types, environment access, and no stray CORS headers. - [kubernetes-mkdocs-documentation-cursorrules-prompt](https://affpapa.org/en/nevibecode/rules/kubernetes-mkdocs-documentation-cursorrules-prompt.md) — rule · PatrickJS · Cursor · ★ 41011 — A Cursor rule that turns the agent into a technical writer for Kubernetes and cloud native docs built with Markdown and MkDocs. - [knative-istio-typesense-gpu-cursorrules-prompt-fil](https://affpapa.org/en/nevibecode/rules/knative-istio-typesense-gpu-cursorrules-prompt-fil.md) — rule · PatrickJS · Cursor · ★ 41011 — A Cursor rule that turns the assistant into a helper for serverless projects built on Knative with Istio, Typesense and HTMX. - [cloudflare-workers-hono-angular-saas-cursorrules-prompt-file](https://affpapa.org/en/nevibecode/rules/cloudflare-workers-hono-angular-saas-cursorrules-prompt-file.md) — rule · PatrickJS · Cursor · ★ 41011 — A Cursor rule that pins the stack and conventions for SaaS on Cloudflare Workers: Hono API, Angular, Drizzle, Clerk, Stripe. - [ankra-cli](https://affpapa.org/en/nevibecode/rules/ankra-cli.md) — rule · PatrickJS · Cursor · ★ 41011 — A Cursor rule that tells the agent how to drive the Ankra CLI: clusters, stacks, Helm releases and tokens. - [vercel](https://affpapa.org/en/nevibecode/rules/vercel.md) — rule · sanjeed5 · Cursor · ★ 3579 — A Cursor rule with opinionated guidance for building and deploying on Vercel. - [sentry](https://affpapa.org/en/nevibecode/rules/sentry.md) — rule · sanjeed5 · Cursor · ★ 3579 — A Cursor rule that pins down how Sentry gets initialized in a project: entry point, env vars, context, and the cases where global init breaks things. - [nginx](https://affpapa.org/en/nevibecode/rules/nginx.md) — rule · sanjeed5 · Cursor · ★ 3579 — A Cursor rule that sets how NGINX configs get written: modular includes, modern TLS, caching and rate limits. - [kubernetes](https://affpapa.org/en/nevibecode/rules/kubernetes.md) — rule · sanjeed5 · Cursor · ★ 3579 — A Cursor rule that sets how you write and split Kubernetes manifests: labels, resources, probes, Pod Security Standards. - [hardhat](https://affpapa.org/en/nevibecode/rules/hardhat.md) — rule · sanjeed5 · Cursor · ★ 3579 — A Cursor rule that sets Hardhat 3 conventions for your project: TypeScript config, Solidity and TypeScript tests, Ignition deployments. - [grafana](https://affpapa.org/en/nevibecode/rules/grafana.md) — rule · sanjeed5 · Cursor · ★ 3579 — A rule that sets one style for Grafana dashboards, alerts and data sources as code: structure, visual standards, query performance. - [github-actions](https://affpapa.org/en/nevibecode/rules/github-actions.md) — rule · sanjeed5 · Cursor · ★ 3579 — A Cursor rule that enforces strict GitHub Actions workflow habits: reusable builds, dependency caching, least-privilege tokens. - [gcp](https://affpapa.org/en/nevibecode/rules/gcp.md) — rule · sanjeed5 · Cursor · ★ 3579 — A Cursor rule that sets how you build, deploy and run apps on Google Cloud: IaC, idempotency, service account permissions. - [flake8](https://affpapa.org/en/nevibecode/rules/flake8.md) — rule · sanjeed5 · Cursor · ★ 3579 — A Cursor rule that tells the agent how to configure flake8 and which checks to turn on. - [ffmpeg](https://affpapa.org/en/nevibecode/rules/ffmpeg.md) — rule · sanjeed5 · Cursor · ★ 3579 — A Cursor rule that tells the agent how to work with FFmpeg: libav* API calls, two-pass encoding, and pinned builds in CI. - [digitalocean](https://affpapa.org/en/nevibecode/rules/digitalocean.md) — rule · sanjeed5 · Cursor · ★ 3579 — A Cursor rule that tells the agent how to build and deploy on DigitalOcean: VPC networking, managed services, container builds. - [datadog](https://affpapa.org/en/nevibecode/rules/datadog.md) — rule · sanjeed5 · Cursor · ★ 3579 — A Cursor rule that sets Datadog standards: required service, env and version tags, structured logs, and a naming scheme for custom metrics. - [azure](https://affpapa.org/en/nevibecode/rules/azure.md) — rule · sanjeed5 · Cursor · ★ 3579 — A Cursor rule that sets code and infrastructure requirements for Azure: IaC, security, cost control. - [aws](https://affpapa.org/en/nevibecode/rules/aws.md) — rule · sanjeed5 · Cursor · ★ 3579 — Tells the agent how to build on AWS: CDK v2 only, Lambda environment reuse, idempotent handlers and least-privilege IAM. - [aws-ecs](https://affpapa.org/en/nevibecode/rules/aws-ecs.md) — rule · sanjeed5 · Cursor · ★ 3579 — A Cursor rule that tells the agent how to build and run containers on AWS ECS: immutable images, secrets from Secrets Manager, logs to stdout. ## Refine [ci-cd](https://affpapa.org/en/nevibecode/tag/ci-cd.md) · [yaml](https://affpapa.org/en/nevibecode/tag/yaml.md) · [serverless](https://affpapa.org/en/nevibecode/tag/serverless.md) · [iac](https://affpapa.org/en/nevibecode/tag/iac.md) · [observability](https://affpapa.org/en/nevibecode/tag/observability.md) · [containers](https://affpapa.org/en/nevibecode/tag/containers.md) · [github-actions](https://affpapa.org/en/nevibecode/tag/github-actions.md) · [infrastructure](https://affpapa.org/en/nevibecode/tag/infrastructure.md) · [linting](https://affpapa.org/en/nevibecode/tag/linting.md) · [angular](https://affpapa.org/en/nevibecode/tag/angular.md) · [bash](https://affpapa.org/en/nevibecode/tag/bash.md) · [caching](https://affpapa.org/en/nevibecode/tag/caching.md) ## Narrow this list Parameters: `?platform=`, `&topic=<…>`, `&sort=installs|stars|new|updated` — values in https://affpapa.org/en/nevibecode/agents.md --- NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md