pangea-hcloud 0.1.0

data/flake.nix

@@ -0,0 +1,60 @@
+{
+  description = "Pangea Hetzner Cloud provider — typed Terraform resource functions";
+
+  inputs = {
+    nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable";
+    ruby-nix.url = "github:inscapist/ruby-nix";
+    flake-utils.url = "github:numtide/flake-utils";
+    substrate = {
+      url = "github:pleme-io/substrate";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
+    forge = {
+      url = "github:pleme-io/forge";
+      inputs.nixpkgs.follows = "nixpkgs";
+      inputs.substrate.follows = "substrate";
+    };
+  };
+
+  outputs = {
+    self,
+    nixpkgs,
+    ruby-nix,
+    flake-utils,
+    substrate,
+    forge,
+    ...
+  }:
+    flake-utils.lib.eachSystem ["x86_64-linux" "aarch64-linux" "aarch64-darwin"] (system: let
+      pkgs = import nixpkgs {
+        inherit system;
+        overlays = [ruby-nix.overlays.ruby];
+      };
+      rnix = ruby-nix.lib pkgs;
+      rnix-env = rnix {
+        name = "pangea-hcloud";
+        gemset = ./gemset.nix;
+      };
+      env = rnix-env.env;
+      ruby = rnix-env.ruby;
+
+      rubyBuild = import "${substrate}/lib/ruby-build.nix" {
+        inherit pkgs;
+        forgeCmd = "${forge.packages.${system}.default}/bin/forge";
+        defaultGhcrToken = "";
+      };
+    in {
+      devShells.default = pkgs.mkShell {
+        buildInputs = [env ruby];
+        shellHook = ''
+          export RUBYLIB=$PWD/lib:$RUBYLIB
+          export DRY_TYPES_WARNINGS=false
+        '';
+      };
+
+      apps = rubyBuild.mkRubyGemApps {
+        srcDir = self;
+        name = "pangea-hcloud";
+      };
+    });
+}

data/gemset.nix

@@ -0,0 +1,272 @@
+{
+  abstract-synthesizer = {
+    groups = ["default"];
+    platforms = [];
+    source = {
+      remotes = ["https://rubygems.org"];
+      sha256 = "1724yzbklcmiiahb7s3y1ir1i0n03b9c3arlib35g85d8hf0h75d";
+      type = "gem";
+    };
+    version = "0.0.15";
+  };
+  base64 = {
+    groups = ["default"];
+    platforms = [];
+    source = {
+      remotes = ["https://rubygems.org"];
+      sha256 = "0yx9yn47a8lkfcjmigk79fykxvr80r4m1i35q82sxzynpbm7lcr7";
+      type = "gem";
+    };
+    version = "0.3.0";
+  };
+  bigdecimal = {
+    groups = ["default"];
+    platforms = [];
+    source = {
+      remotes = ["https://rubygems.org"];
+      sha256 = "19y406nx17arzsbc515mjmr6k5p59afprspa1k423yd9cp8d61wb";
+      type = "gem";
+    };
+    version = "4.0.1";
+  };
+  concurrent-ruby = {
+    groups = ["default"];
+    platforms = [];
+    source = {
+      remotes = ["https://rubygems.org"];
+      sha256 = "1aymcakhzl83k77g2f2krz07bg1cbafbcd2ghvwr4lky3rz86mkb";
+      type = "gem";
+    };
+    version = "1.3.6";
+  };
+  diff-lcs = {
+    groups = ["default" "development"];
+    platforms = [];
+    source = {
+      remotes = ["https://rubygems.org"];
+      sha256 = "0qlrj2qyysc9avzlr4zs1py3x684hqm61n4czrsk1pyllz5x5q4s";
+      type = "gem";
+    };
+    version = "1.6.2";
+  };
+  docile = {
+    groups = ["default" "development"];
+    platforms = [];
+    source = {
+      remotes = ["https://rubygems.org"];
+      sha256 = "07pj4z3h8wk4fgdn6s62vw1lwvhj0ac0x10vfbdkr9xzk7krn5cn";
+      type = "gem";
+    };
+    version = "1.4.1";
+  };
+  dry-core = {
+    dependencies = ["concurrent-ruby" "logger" "zeitwerk"];
+    groups = ["default"];
+    platforms = [];
+    source = {
+      remotes = ["https://rubygems.org"];
+      sha256 = "18cn9s2p7cbgacy0z41h3sf9jvl75vjfmvj774apyffzi3dagi8c";
+      type = "gem";
+    };
+    version = "1.2.0";
+  };
+  dry-inflector = {
+    groups = ["default"];
+    platforms = [];
+    source = {
+      remotes = ["https://rubygems.org"];
+      sha256 = "1k1dd35sqqqg2abd2g2w78m94pa3mcwvmrsjbkr3hxpn0jxw5c3z";
+      type = "gem";
+    };
+    version = "1.3.1";
+  };
+  dry-logic = {
+    dependencies = ["bigdecimal" "concurrent-ruby" "dry-core" "zeitwerk"];
+    groups = ["default"];
+    platforms = [];
+    source = {
+      remotes = ["https://rubygems.org"];
+      sha256 = "18nf8mbnhgvkw34drj7nmvpx2afmyl2nyzncn3wl3z4h1yyfsvys";
+      type = "gem";
+    };
+    version = "1.6.0";
+  };
+  dry-struct = {
+    dependencies = ["dry-core" "dry-types" "ice_nine" "zeitwerk"];
+    groups = ["default"];
+    platforms = [];
+    source = {
+      remotes = ["https://rubygems.org"];
+      sha256 = "0ri9iqxknxvvhpbshf6jn7bq581k8l67iv23mii69yr4k5aqphvl";
+      type = "gem";
+    };
+    version = "1.8.0";
+  };
+  dry-types = {
+    dependencies = ["bigdecimal" "concurrent-ruby" "dry-core" "dry-inflector" "dry-logic" "zeitwerk"];
+    groups = ["default"];
+    platforms = [];
+    source = {
+      remotes = ["https://rubygems.org"];
+      sha256 = "0y7icwaa26ycikz6h97gwd1hji3r280n4yr2kmn5sfgqp76yxsxs";
+      type = "gem";
+    };
+    version = "1.9.1";
+  };
+  ice_nine = {
+    groups = ["default"];
+    platforms = [];
+    source = {
+      remotes = ["https://rubygems.org"];
+      sha256 = "1nv35qg1rps9fsis28hz2cq2fx1i96795f91q4nmkm934xynll2x";
+      type = "gem";
+    };
+    version = "0.11.2";
+  };
+  logger = {
+    groups = ["default"];
+    platforms = [];
+    source = {
+      remotes = ["https://rubygems.org"];
+      sha256 = "00q2zznygpbls8asz5knjvvj2brr3ghmqxgr83xnrdj4rk3xwvhr";
+      type = "gem";
+    };
+    version = "1.7.0";
+  };
+  pangea-core = {
+    dependencies = ["base64" "dry-struct" "dry-types" "terraform-synthesizer"];
+    groups = ["default"];
+    platforms = [];
+    source = {
+      path = ../pangea-core;
+      type = "path";
+    };
+    version = "0.1.0";
+  };
+  pangea-hcloud = {
+    dependencies = ["dry-struct" "dry-types" "pangea-core" "terraform-synthesizer"];
+    groups = ["default"];
+    platforms = [];
+    source = {
+      path = ./.;
+      type = "path";
+    };
+    version = "0.1.0";
+  };
+  rake = {
+    groups = ["development"];
+    platforms = [];
+    source = {
+      remotes = ["https://rubygems.org"];
+      sha256 = "175iisqb211n0qbfyqd8jz2g01q6xj038zjf4q0nm8k6kz88k7lc";
+      type = "gem";
+    };
+    version = "13.3.1";
+  };
+  rspec = {
+    dependencies = ["rspec-core" "rspec-expectations" "rspec-mocks"];
+    groups = ["development"];
+    platforms = [];
+    source = {
+      remotes = ["https://rubygems.org"];
+      sha256 = "11q5hagj6vr694innqj4r45jrm8qcwvkxjnphqgyd66piah88qi0";
+      type = "gem";
+    };
+    version = "3.13.2";
+  };
+  rspec-core = {
+    dependencies = ["rspec-support"];
+    groups = ["default" "development"];
+    platforms = [];
+    source = {
+      remotes = ["https://rubygems.org"];
+      sha256 = "0bcbh9yv6cs6pv299zs4bvalr8yxa51kcdd1pjl60yv625j3r0m8";
+      type = "gem";
+    };
+    version = "3.13.6";
+  };
+  rspec-expectations = {
+    dependencies = ["diff-lcs" "rspec-support"];
+    groups = ["default" "development"];
+    platforms = [];
+    source = {
+      remotes = ["https://rubygems.org"];
+      sha256 = "0dl8npj0jfpy31bxi6syc7jymyd861q277sfr6jawq2hv6hx791k";
+      type = "gem";
+    };
+    version = "3.13.5";
+  };
+  rspec-mocks = {
+    dependencies = ["diff-lcs" "rspec-support"];
+    groups = ["default" "development"];
+    platforms = [];
+    source = {
+      remotes = ["https://rubygems.org"];
+      sha256 = "071bqrk2rblk3zq3jk1xxx0dr92y0szi5pxdm8waimxici706y89";
+      type = "gem";
+    };
+    version = "3.13.7";
+  };
+  rspec-support = {
+    groups = ["default" "development"];
+    platforms = [];
+    source = {
+      remotes = ["https://rubygems.org"];
+      sha256 = "0z64h5rznm2zv21vjdjshz4v0h7bxvg02yc6g7yzxakj11byah06";
+      type = "gem";
+    };
+    version = "3.13.7";
+  };
+  simplecov = {
+    dependencies = ["docile" "simplecov-html" "simplecov_json_formatter"];
+    groups = ["development"];
+    platforms = [];
+    source = {
+      remotes = ["https://rubygems.org"];
+      sha256 = "198kcbrjxhhzca19yrdcd6jjj9sb51aaic3b0sc3pwjghg3j49py";
+      type = "gem";
+    };
+    version = "0.22.0";
+  };
+  simplecov-html = {
+    groups = ["default" "development"];
+    platforms = [];
+    source = {
+      remotes = ["https://rubygems.org"];
+      sha256 = "0ikjfwydgs08nm3xzc4cn4b6z6rmcrj2imp84xcnimy2wxa8w2xx";
+      type = "gem";
+    };
+    version = "0.13.2";
+  };
+  simplecov_json_formatter = {
+    groups = ["default" "development"];
+    platforms = [];
+    source = {
+      remotes = ["https://rubygems.org"];
+      sha256 = "0a5l0733hj7sk51j81ykfmlk2vd5vaijlq9d5fn165yyx3xii52j";
+      type = "gem";
+    };
+    version = "0.1.4";
+  };
+  terraform-synthesizer = {
+    dependencies = ["abstract-synthesizer"];
+    groups = ["default"];
+    platforms = [];
+    source = {
+      remotes = ["https://rubygems.org"];
+      sha256 = "01yl1s6xnxn3qh42ybqanxdgcfpppg2cvjk8pka7xcf5hxz9qxda";
+      type = "gem";
+    };
+    version = "0.0.28";
+  };
+  zeitwerk = {
+    groups = ["default"];
+    platforms = [];
+    source = {
+      remotes = ["https://rubygems.org"];
+      sha256 = "1pbkiwwla5gldgb3saamn91058nl1sq1344l5k36xsh9ih995nnq";
+      type = "gem";
+    };
+    version = "2.7.5";
+  };
+}

data/lib/pangea/resources/hcloud.rb

@@ -0,0 +1,64 @@
+# frozen_string_literal: true
+
+require 'pangea/resources/types'
+require 'pangea/resources/base'
+
+# Require all hcloud resources
+require_relative 'hcloud_certificate/resource'
+require_relative 'hcloud_firewall/resource'
+require_relative 'hcloud_firewall_attachment/resource'
+require_relative 'hcloud_floating_ip/resource'
+require_relative 'hcloud_floating_ip_assignment/resource'
+require_relative 'hcloud_load_balancer/resource'
+require_relative 'hcloud_load_balancer_network/resource'
+require_relative 'hcloud_load_balancer_service/resource'
+require_relative 'hcloud_load_balancer_target/resource'
+require_relative 'hcloud_managed_certificate/resource'
+require_relative 'hcloud_network/resource'
+require_relative 'hcloud_network_route/resource'
+require_relative 'hcloud_network_subnet/resource'
+require_relative 'hcloud_placement_group/resource'
+require_relative 'hcloud_primary_ip/resource'
+require_relative 'hcloud_rdns/resource'
+require_relative 'hcloud_server/resource'
+require_relative 'hcloud_server_network/resource'
+require_relative 'hcloud_snapshot/resource'
+require_relative 'hcloud_ssh_key/resource'
+require_relative 'hcloud_uploaded_certificate/resource'
+require_relative 'hcloud_volume/resource'
+require_relative 'hcloud_volume_attachment/resource'
+require_relative 'hcloud_zone/resource'
+require_relative 'hcloud_zone_rrset/resource'
+
+module Pangea
+  module Resources
+    module Hcloud
+      include Base
+      include HcloudCertificate
+      include HcloudFirewall
+      include HcloudFirewallAttachment
+      include HcloudFloatingIp
+      include HcloudFloatingIpAssignment
+      include HcloudLoadBalancer
+      include HcloudLoadBalancerNetwork
+      include HcloudLoadBalancerService
+      include HcloudLoadBalancerTarget
+      include HcloudManagedCertificate
+      include HcloudNetwork
+      include HcloudNetworkRoute
+      include HcloudNetworkSubnet
+      include HcloudPlacementGroup
+      include HcloudPrimaryIp
+      include HcloudRdns
+      include HcloudServer
+      include HcloudServerNetwork
+      include HcloudSnapshot
+      include HcloudSshKey
+      include HcloudUploadedCertificate
+      include HcloudVolume
+      include HcloudVolumeAttachment
+      include HcloudZone
+      include HcloudZoneRrset
+    end
+  end
+end

data/lib/pangea/resources/hcloud_certificate/resource.rb

@@ -0,0 +1,50 @@
+# frozen_string_literal: true
+# Copyright 2025 The Pangea Authors
+
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/hcloud_certificate/types'
+require 'pangea/resource_registry'
+
+module Pangea
+  module Resources
+    module HcloudCertificate
+      # Create Certificate
+      def hcloud_certificate(name, attributes = {})
+        cert_attrs = Hetzner::Types::CertificateAttributes.new(attributes)
+
+        resource(:hcloud_certificate, name) do
+          name cert_attrs.name
+          certificate cert_attrs.certificate if cert_attrs.certificate
+          private_key cert_attrs.private_key if cert_attrs.private_key
+
+          if cert_attrs.labels.any?
+            labels do
+              cert_attrs.labels.each do |key, value|
+                public_send(key, value)
+              end
+            end
+          end
+        end
+
+        ResourceReference.new(
+          type: 'hcloud_certificate',
+          name: name,
+          resource_attributes: cert_attrs.to_h,
+          outputs: {
+            id: "${hcloud_certificate.#{name}.id}",
+            name: "${hcloud_certificate.#{name}.name}",
+            not_valid_before: "${hcloud_certificate.#{name}.not_valid_before}",
+            not_valid_after: "${hcloud_certificate.#{name}.not_valid_after}"
+          }
+        )
+      end
+    end
+
+    module Hetzner
+      include HcloudCertificate
+    end
+  end
+end
+
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Hetzner)

data/lib/pangea/resources/hcloud_certificate/types.rb

@@ -0,0 +1,26 @@
+# frozen_string_literal: true
+# Copyright 2025 The Pangea Authors
+
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea
+  module Resources
+    module Hetzner
+      module Types
+        # Hetzner Certificate attributes
+        class CertificateAttributes < Dry::Struct
+          transform_keys(&:to_sym)
+
+          # Required attributes
+          attribute :name, Resources::Types::String
+
+          # Optional attributes (depends on type)
+          attribute :certificate, Resources::Types::String.optional.default(nil)
+          attribute :private_key, Resources::Types::String.optional.default(nil)
+          attribute :labels, Resources::Types::HetznerLabels.default({}.freeze)
+        end
+      end
+    end
+  end
+end

data/lib/pangea/resources/hcloud_firewall/resource.rb

@@ -0,0 +1,57 @@
+# frozen_string_literal: true
+# Copyright 2025 The Pangea Authors
+
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/hcloud_firewall/types'
+require 'pangea/resource_registry'
+
+module Pangea
+  module Resources
+    module HcloudFirewall
+      # Create a Hetzner Cloud Firewall with type-safe attributes
+      def hcloud_firewall(name, attributes = {})
+        firewall_attrs = Hetzner::Types::FirewallAttributes.new(attributes)
+
+        resource(:hcloud_firewall, name) do
+          name firewall_attrs.name
+
+          # Add firewall rules
+          firewall_attrs.rules.each do |rule|
+            rule do
+              direction rule[:direction]
+              protocol rule[:protocol]
+              port rule[:port] if rule[:port]
+              source_ips rule[:source_ips] if rule[:source_ips]
+              destination_ips rule[:destination_ips] if rule[:destination_ips]
+            end
+          end
+
+          if firewall_attrs.labels.any?
+            labels do
+              firewall_attrs.labels.each do |key, value|
+                public_send(key, value)
+              end
+            end
+          end
+        end
+
+        ResourceReference.new(
+          type: 'hcloud_firewall',
+          name: name,
+          resource_attributes: firewall_attrs.to_h,
+          outputs: {
+            id: "${hcloud_firewall.#{name}.id}",
+            name: "${hcloud_firewall.#{name}.name}"
+          }
+        )
+      end
+    end
+
+    module Hetzner
+      include HcloudFirewall
+    end
+  end
+end
+
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Hetzner)

data/lib/pangea/resources/hcloud_firewall/types.rb

@@ -0,0 +1,25 @@
+# frozen_string_literal: true
+# Copyright 2025 The Pangea Authors
+
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea
+  module Resources
+    module Hetzner
+      module Types
+        # Hetzner Firewall resource attributes with validation
+        class FirewallAttributes < Dry::Struct
+          transform_keys(&:to_sym)
+
+          # Required attributes
+          attribute :name, Resources::Types::String
+
+          # Optional attributes
+          attribute :rules, Resources::Types::Array.of(Resources::Types::HetznerFirewallRule).default([].freeze)
+          attribute :labels, Resources::Types::HetznerLabels.default({}.freeze)
+        end
+      end
+    end
+  end
+end

data/lib/pangea/resources/hcloud_firewall_attachment/resource.rb

@@ -0,0 +1,40 @@
+# frozen_string_literal: true
+# Copyright 2025 The Pangea Authors
+
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/hcloud_firewall_attachment/types'
+require 'pangea/resource_registry'
+
+module Pangea
+  module Resources
+    module HcloudFirewallAttachment
+      # Attach Firewall to Servers
+      def hcloud_firewall_attachment(name, attributes = {})
+        fa_attrs = Hetzner::Types::FirewallAttachmentAttributes.new(attributes)
+
+        resource(:hcloud_firewall_attachment, name) do
+          firewall_id fa_attrs.firewall_id
+          server_ids fa_attrs.server_ids if fa_attrs.server_ids.any?
+        end
+
+        ResourceReference.new(
+          type: 'hcloud_firewall_attachment',
+          name: name,
+          resource_attributes: fa_attrs.to_h,
+          outputs: {
+            id: "${hcloud_firewall_attachment.#{name}.id}",
+            firewall_id: "${hcloud_firewall_attachment.#{name}.firewall_id}",
+            server_ids: "${hcloud_firewall_attachment.#{name}.server_ids}"
+          }
+        )
+      end
+    end
+
+    module Hetzner
+      include HcloudFirewallAttachment
+    end
+  end
+end
+
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Hetzner)

data/lib/pangea/resources/hcloud_firewall_attachment/types.rb

@@ -0,0 +1,22 @@
+# frozen_string_literal: true
+# Copyright 2025 The Pangea Authors
+
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea
+  module Resources
+    module Hetzner
+      module Types
+        # Hetzner Firewall Attachment attributes
+        class FirewallAttachmentAttributes < Dry::Struct
+          transform_keys(&:to_sym)
+
+          # Required attributes
+          attribute :firewall_id, Resources::Types::String
+          attribute :server_ids, Resources::Types::Array.of(Resources::Types::String).default([].freeze)
+        end
+      end
+    end
+  end
+end

data/lib/pangea/resources/hcloud_floating_ip/resource.rb

@@ -0,0 +1,52 @@
+# frozen_string_literal: true
+# Copyright 2025 The Pangea Authors
+
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/hcloud_floating_ip/types'
+require 'pangea/resource_registry'
+
+module Pangea
+  module Resources
+    module HcloudFloatingIp
+      # Create a Hetzner Cloud Floating IP
+      def hcloud_floating_ip(name, attributes = {})
+        fip_attrs = Hetzner::Types::FloatingIpAttributes.new(attributes)
+
+        resource(:hcloud_floating_ip, name) do
+          type fip_attrs.type
+          home_location fip_attrs.home_location if fip_attrs.home_location
+          server_id fip_attrs.server_id if fip_attrs.server_id
+          description fip_attrs.description if fip_attrs.description
+          name fip_attrs.name if fip_attrs.name
+
+          if fip_attrs.labels.any?
+            labels do
+              fip_attrs.labels.each do |key, value|
+                public_send(key, value)
+              end
+            end
+          end
+        end
+
+        ResourceReference.new(
+          type: 'hcloud_floating_ip',
+          name: name,
+          resource_attributes: fip_attrs.to_h,
+          outputs: {
+            id: "${hcloud_floating_ip.#{name}.id}",
+            ip_address: "${hcloud_floating_ip.#{name}.ip_address}",
+            name: "${hcloud_floating_ip.#{name}.name}",
+            home_location: "${hcloud_floating_ip.#{name}.home_location}"
+          }
+        )
+      end
+    end
+
+    module Hetzner
+      include HcloudFloatingIp
+    end
+  end
+end
+
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Hetzner)