Andreas Niemann
57c4eadea7
- Bun workspaces (packages/* + bootstrap); Pulumi nodejs runtime under
packagemanager: bun (no npm fallback needed).
- bootstrap/config.ts: typed FoundationConfig per CONTRACT_001; loadConfig()
fails closed, aggregating all missing+malformed keys in one error. Reads flat
dotted keys; image digests excluded (they live in VERSIONS, D5).
- bootstrap/Pulumi.foundation.yaml: non-secret placeholders only (RFC-5737 vm.host,
.invalid offsite); no encryptionsalt/secrets committed (D2). pulumi preview = 0
resources under the passphrase provider via gitignored file:// state backend.
- Stage-1 vendoring: packages/pulumi-{docker,vault} as @olsitec/* (source-only,
logic unchanged). vault's 5 type-only imports from modules/olsitec re-homed
verbatim into pulumi-vault/olsitec-types.ts to keep the egg self-contained.
Realizes PLAN-002 §10 T02; ADR-005 / 000_TOPOLOGY.md §5 Stage-1.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
18 lines
714 B
YAML
18 lines
714 B
YAML
---
|
|
name: foundation
|
|
description: >-
|
|
The olsitec-foundation bootstrap "egg" — one Pulumi project that deploys
|
|
Forgejo + PostgreSQL + Vault + RustFS + Caddy as Docker containers on a single
|
|
VM via @pulumi/docker over SSH (PLAN-002 §0, Layer 0). No K8s / ArgoCD / Helm.
|
|
runtime:
|
|
name: nodejs
|
|
options:
|
|
# Bun is the Olsitec-preferred package manager (footgun 16.3). Pulumi's
|
|
# nodejs runtime supports it via `packagemanager: bun`. Bun resolves the
|
|
# workspace `@olsitec/pulumi-*` packages from ../packages/* locally — no
|
|
# registry needed at day-zero (the registry is part of what this builds).
|
|
packagemanager: bun
|
|
config:
|
|
pulumi:tags:
|
|
value:
|
|
pulumi:template: typescript
|