feat: initial commit

- add modules - add config - add environments - add .gitignore - add makefile Wire up config.hcl, variables, and terragrunt inputs for all new types.
2026-06-28 18:22:48 +10:00
42 changed files with 29 additions and 106 deletions
@@ -1,11 +1,3 @@
 # terraform-artifactapi

-Terraform configuration for managing ArtifactAPI remote, local, and virtual repositories.
-
-Repositories are declared as YAML files under `config/<kind>/<name>.yaml`, where the
-filename is the repository name. `make plan` / `make apply` (via Terragrunt) reconcile
-them against the ArtifactAPI instance.
-
-Kinds: `remote_*` (caching proxies of an upstream), `local_*` (real registries hosted
-directly — `local_docker`, `local_pypi`, `local_rpm`, `local_terraform`), and `virtual`
-(merged views over members of one package type).
+Terraform configuration for managing ArtifactAPI remote and virtual repositories
@@ -57,11 +57,6 @@ locals {
      trimsuffix(basename(file_path), ".yaml") => content
      if startswith(file_path, "local_rpm/")
    }
-    local_docker = {
-      for file_path, content in local.all_configs :
-      trimsuffix(basename(file_path), ".yaml") => content
-      if startswith(file_path, "local_docker/")
-    }
    virtual = {
      for file_path, content in local.all_configs :
      trimsuffix(basename(file_path), ".yaml") => content
@@ -1 +0,0 @@
-description: "Internal container image registry"
@@ -1 +0,0 @@
-description: "Internal RPM packages for Enterprise Linux 10 (RHEL/AlmaLinux/Rocky 10)"
@@ -1 +0,0 @@
-description: "Internal RPM packages for Enterprise Linux 8 (RHEL/AlmaLinux/Rocky 8)"
@@ -1 +0,0 @@
-description: "Internal RPM packages for Enterprise Linux 9 (RHEL/AlmaLinux/Rocky 9)"
@@ -1 +0,0 @@
-description: "Internal RPM packages for Fedora 42"
@@ -1 +0,0 @@
-description: "Internal RPM packages for Fedora 43"
@@ -1 +0,0 @@
-description: "Internal RPM packages for Fedora 44"
@@ -1 +1 @@
-description: "Internal RPM packages (distribution-agnostic)"
+description: "Internal RPM packages"
@@ -1 +0,0 @@
-description: "Vendored third-party RPM packages for Enterprise Linux 8 (RHEL/AlmaLinux/Rocky 8), built by rpmbuilder"
@@ -1 +0,0 @@
-description: "Vendored third-party RPM packages for Enterprise Linux 9 (RHEL/AlmaLinux/Rocky 9), built by rpmbuilder"
@@ -1 +0,0 @@
-description: "Vendored third-party RPM packages for Fedora 42, built by rpmbuilder"
@@ -1 +0,0 @@
-description: "Vendored third-party RPM packages for Fedora 43, built by rpmbuilder"
@@ -1 +0,0 @@
-description: "Vendored third-party RPM packages for Fedora 44, built by rpmbuilder"
@@ -3,9 +3,7 @@ description: Docker Hub registry
 immutable_ttl: 0
 mutable_ttl: 300
 patterns:
-  - "^alpine/"
  - "^library/almalinux"
-  - "^library/alpine"
  - "^library/busybox"
  - "^library/debian"
  - "^library/fedora"
@@ -16,18 +14,12 @@ patterns:
  - "^bitnami/"
  - "^curlimages/curl"
  - "^emberstack/kubernetes-reflector"
-  - "^grafana/"
  - "^hashicorp/consul"
  - "^hashicorp/vault"
-  - "^intel/"
-  - "^internetsystemsconsortium/bind9"
  - "^jfrog/"
-  - "^jpgouin/"
  - "^kanidm/"
-  - "^osixia/"
  - "^rancher/"
  - "^rspamd/rspamd"
-  - "^tiredofit/"
  - "^tozd/postfix"
  - "^traefik/"
  - "^valkey/valkey"
@@ -1,6 +0,0 @@
-base_url: https://public.ecr.aws
-description: Amazon ECR Public registry
-immutable_ttl: 0
-mutable_ttl: 300
-patterns:
-  - "^docker/library/"
@@ -3,18 +3,10 @@ description: GitHub Container Registry
 immutable_ttl: 0
 mutable_ttl: 300
 patterns:
-  - "^cloudnative-pg/"
-  - "^dexidp/"
+  - "^cloudnative-pg/cloudnative-pg"
  - "^emberstack/helm-charts"
-  - "^fallenbagel/"
-  - "^goauthentik/"
-  - "^home-operations/"
-  - "^jellyfin/"
-  - "^onedr0p/"
  - "^open-webui/open-webui"
  - "^openvoxproject/"
-  - "^paperclipai/"
-  - "^plexguide/"
  - "^stakater/reloader"
  - "^stalwartlabs/stalwart"
  - "^voxpupuli/puppetboard"
@@ -1,6 +0,0 @@
-base_url: https://docker.litellm.ai
-description: LiteLLM container registry
-immutable_ttl: 0
-mutable_ttl: 300
-patterns:
-  - "^berriai/"
@@ -3,7 +3,6 @@ description: Quay.io container registry
 immutable_ttl: 0
 mutable_ttl: 300
 patterns:
-  - "^argoproj/"
  - "^brancz/kube-rbac-proxy"
  - "^cephcsi/cephcsi"
  - "^jetstack/cert-manager-"
@@ -1,10 +0,0 @@
-base_url: https://media.githubusercontent.com
-description: iplocate IP address databases (ip-to-asn / ip-to-country), served via GitHub LFS media
-immutable_ttl: 0
-# The databases update on the main branch; re-check upstream daily (matches the
-# ASN expander's cache cadence).
-mutable_ttl: 86400
-mutable_patterns:
-  # LFS objects are served from media.githubusercontent.com/media/<owner>/<repo>/<ref>/<path>.
-  - "media/iplocate/ip-address-databases/.*/ip-to-asn/.*"
-  - "media/iplocate/ip-address-databases/.*/ip-to-country/.*"
@@ -5,6 +5,9 @@ mutable_ttl: 7200
 immutable_patterns:
  - ".*/x86_64/.*\\.rpm$"
  - ".*/noarch/.*\\.rpm$"
+  - ".*/repodata/.*\\.sqlite.*$"
+  - ".*/repodata/.*\\.xml.*$"
+  - ".*/repodata/.*\\.yaml.*$"
  - ".*/install.img"
  - ".*/squashfs.img"
  - ".*/updates.img"
@@ -5,6 +5,9 @@ mutable_ttl: 7200
 immutable_patterns:
  - ".*/x86_64/.*\\.rpm$"
  - ".*/noarch/.*\\.rpm$"
+  - ".*/repodata/.*\\.sqlite.*$"
+  - ".*/repodata/.*\\.xml.*$"
+  - ".*/repodata/.*\\.yaml.*$"
  - ".*/install.img"
  - ".*/squashfs.img"
  - ".*/updates.img"
@@ -5,3 +5,4 @@ mutable_ttl: 7200
 immutable_patterns:
  - ".*/x86_64/.*\\.rpm$"
  - ".*/noarch/.*\\.rpm$"
+  - ".*/repodata/.*\\.xml.*$"
@@ -5,3 +5,4 @@ mutable_ttl: 7200
 immutable_patterns:
  - ".*/x86_64/.*\\.rpm$"
  - ".*/noarch/.*\\.rpm$"
+  - ".*/repodata/.*\\.xml.*$"
@@ -5,3 +5,4 @@ mutable_ttl: 7200
 immutable_patterns:
  - ".*/x86_64/.*\\.rpm$"
  - ".*/noarch/.*\\.rpm$"
+  - ".*/repodata/.*\\.xml.*$"
@@ -3,3 +3,4 @@ description: "Claude Code RPM repository"
 immutable_patterns:
  - ".*/x86_64/.*\\.rpm$"
  - ".*/noarch/.*\\.rpm$"
+  - ".*/repodata/.*\\.xml.*$"
@@ -5,4 +5,7 @@ mutable_ttl: 7200
 immutable_patterns:
  - ".*/Everything/x86_64/.*\\.rpm$"
  - ".*/noarch/.*\\.rpm$"
+  - ".*/repodata/.*\\.sqlite.*$"
+  - ".*/repodata/.*\\.xml.*$"
+  - ".*/repodata/.*\\.yaml.*$"
  - "RPM-GPG-KEY-.*$"
@@ -7,3 +7,4 @@ immutable_patterns:
  - "updates/.*/Everything/x86_64/.*\\.rpm$"
  - "development/.*/Everything/x86_64/.*\\.rpm$"
  - ".*/noarch/.*\\.rpm$"
+  - ".*/repodata/.*\\.xml.*$"
@@ -4,3 +4,4 @@ immutable_ttl: 0
 mutable_ttl: 7200
 immutable_patterns:
  - ".*\\.rpm$"
+  - ".*/repodata/.*\\.xml.*$"
@@ -4,4 +4,5 @@ immutable_ttl: 0
 mutable_ttl: 7200
 immutable_patterns:
  - ".*\\.rpm$"
+  - ".*/repodata/.*\\.xml.*$"
  - ".*/RPM-GPG-KEY-.*$"
@@ -4,4 +4,5 @@ immutable_ttl: 0
 mutable_ttl: 7200
 immutable_patterns:
  - ".*\\.rpm$"
+  - ".*/repodata/.*\\.xml.*$"
  - "GPG-KEY-.*$"
@@ -4,5 +4,6 @@ immutable_ttl: 0
 mutable_ttl: 7200
 immutable_patterns:
  - ".*\\.rpm$"
+  - ".*/repodata/.*\\.xml.*$"
  - ".*/RPM-GPG-KEY-.*$"
  - ".*/PGDG-RPM-GPG-KEY-.*$"
@@ -4,4 +4,5 @@ immutable_ttl: 0
 mutable_ttl: 7200
 immutable_patterns:
  - ".*\\.rpm$"
+  - ".*/repodata/.*\\.xml.*$"
  - "public.key$"
@@ -1,7 +0,0 @@
-base_url: https://download1.rpmfusion.org/free
-description: RPM Fusion free RPM package repository
-immutable_ttl: 0
-mutable_ttl: 7200
-immutable_patterns:
-  - ".*\\.rpm$"
-  - "RPM-GPG-KEY-.*$"
@@ -1,7 +0,0 @@
-base_url: https://download1.rpmfusion.org/nonfree
-description: RPM Fusion nonfree RPM package repository
-immutable_ttl: 0
-mutable_ttl: 7200
-immutable_patterns:
-  - ".*\\.rpm$"
-  - "RPM-GPG-KEY-.*$"
@@ -4,3 +4,4 @@ immutable_ttl: 0
 mutable_ttl: 7200
 immutable_patterns:
  - ".*\\.rpm$"
+  - ".*/repodata/.*\\.xml.*$"
@@ -27,6 +27,5 @@ inputs = {
  local_terraform = local.config.local_terraform
  local_pypi      = local.config.local_pypi
  local_rpm       = local.config.local_rpm
-  local_docker    = local.config.local_docker
  virtual         = local.config.virtual
 }
@@ -15,6 +15,12 @@ terraform {
    ca_file = "/etc/pki/tls/certs/ca-bundle.crt"
  }
  required_version = ">= 1.10"
+  required_providers {
+    artifactapi = {
+      source  = "git.unkin.net/unkin/artifactapi"
+      version = "0.1.0"
+    }
+  }
 }
 EOF
 }
@@ -110,13 +110,6 @@ resource "artifactapi_local_rpm" "this" {
  description = each.value.description
 }

-resource "artifactapi_local_docker" "this" {
-  for_each = var.local_docker
-
-  name        = each.key
-  description = each.value.description
-}
-
 resource "artifactapi_virtual" "this" {
  for_each = var.virtual

@@ -120,14 +120,6 @@ variable "local_terraform" {
  default = {}
 }

-variable "local_docker" {
-  description = "Map of local Docker repositories (real container registries)"
-  type = map(object({
-    description = optional(string, "")
-  }))
-  default = {}
-}
-
 variable "virtual" {
  description = "Map of virtual repositories"
  type = map(object({
@@ -1,9 +0,0 @@
-terraform {
-  required_version = ">= 1.10"
-  required_providers {
-    artifactapi = {
-      source  = "artifactapi.k8s.syd1.au.unkin.net/terraform-unkin/artifactapi"
-      version = "0.1.3"
-    }
-  }
-}
				`@@ -1 +0,0 @@`
				`description: "Internal container image registry"`
				`@@ -1 +0,0 @@`
				`description: "Internal RPM packages for Enterprise Linux 10 (RHEL/AlmaLinux/Rocky 10)"`
				`@@ -1 +0,0 @@`
				`description: "Vendored third-party RPM packages for Enterprise Linux 8 (RHEL/AlmaLinux/Rocky 8), built by rpmbuilder"`