I have only experimented, but I haven't settled on anything.

I actually like having my Terraform single source of truth in local git (backed up).

What I'm missing from Terraform Cloud is the `terraform plan` on pull-request submission and `terraform apply` upon merge.

I might do that with ArgoCD. And better CI/CD integration in Forgejo. But that's a long shot still.