Gator verdict: approved

This is a textbook Original Build with hard-won writeup texture — the author dogfooded swamp to deploy swamp itself, hit real bugs against a live FreeIPA CA that mocks missed, and shows specific tooling decisions (cert handling via @shrug/freeipa, secrets through CEL/pass, cfgmgmt delivery) that only come from actually doing the work.

I Made swamp Deploy swamp

by @kneel23d agothepotato.tech

https://thepotato.tech/posts/swamp-as-a-service/ ↗

I stood up 'swamp serve' as its own FreeIPA service account using nothing but swamp models. The tool configured the host that runs the tool, and then my own OAuth flow spent an afternoon trying to lock me out.