@tyevco/pulumi-homelab 0.1.3 → 0.2.0

package/index.d.ts

@@ -2,4 +2,10 @@ export { Provider, ProviderArgs } from "./provider";
 export { Stack, StackArgs, ContainerInfo } from "./stack";
 export { TraefikStaticConfig, TraefikStaticConfigArgs } from "./traefikStaticConfig";
 export { TraefikRoute, TraefikRouteArgs } from "./traefikRoute";
+export { OpnsenseFirewallRule, OpnsenseFirewallRuleArgs } from "./opnsenseFirewallRule";
+export { OpnsenseAlias, OpnsenseAliasArgs } from "./opnsenseAlias";
+export { OpnsenseUnboundHostOverride, OpnsenseUnboundHostOverrideArgs } from "./opnsenseUnboundHostOverride";
+export { OpnsenseUnboundForward, OpnsenseUnboundForwardArgs } from "./opnsenseUnboundForward";
+export { OpnsenseUnboundAcl, OpnsenseUnboundAclArgs } from "./opnsenseUnboundAcl";
+export { OpnsenseUnboundDnsbl, OpnsenseUnboundDnsblArgs } from "./opnsenseUnboundDnsbl";
 export { DockgeStack, DockgeStackArgs, DockgeContainerInfo } from "./stack";

package/index.js

@@ -1,7 +1,7 @@
 "use strict";
 // Pulumi SDK for Homelab - manages homelab infrastructure via the Dockge REST API
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.DockgeStack = exports.TraefikRoute = exports.TraefikStaticConfig = exports.Stack = exports.Provider = void 0;
+exports.DockgeStack = exports.OpnsenseUnboundDnsbl = exports.OpnsenseUnboundAcl = exports.OpnsenseUnboundForward = exports.OpnsenseUnboundHostOverride = exports.OpnsenseAlias = exports.OpnsenseFirewallRule = exports.TraefikRoute = exports.TraefikStaticConfig = exports.Stack = exports.Provider = void 0;
 // Provider
 var provider_1 = require("./provider");
 Object.defineProperty(exports, "Provider", { enumerable: true, get: function () { return provider_1.Provider; } });
@@ -12,6 +12,18 @@ var traefikStaticConfig_1 = require("./traefikStaticConfig");
 Object.defineProperty(exports, "TraefikStaticConfig", { enumerable: true, get: function () { return traefikStaticConfig_1.TraefikStaticConfig; } });
 var traefikRoute_1 = require("./traefikRoute");
 Object.defineProperty(exports, "TraefikRoute", { enumerable: true, get: function () { return traefikRoute_1.TraefikRoute; } });
+var opnsenseFirewallRule_1 = require("./opnsenseFirewallRule");
+Object.defineProperty(exports, "OpnsenseFirewallRule", { enumerable: true, get: function () { return opnsenseFirewallRule_1.OpnsenseFirewallRule; } });
+var opnsenseAlias_1 = require("./opnsenseAlias");
+Object.defineProperty(exports, "OpnsenseAlias", { enumerable: true, get: function () { return opnsenseAlias_1.OpnsenseAlias; } });
+var opnsenseUnboundHostOverride_1 = require("./opnsenseUnboundHostOverride");
+Object.defineProperty(exports, "OpnsenseUnboundHostOverride", { enumerable: true, get: function () { return opnsenseUnboundHostOverride_1.OpnsenseUnboundHostOverride; } });
+var opnsenseUnboundForward_1 = require("./opnsenseUnboundForward");
+Object.defineProperty(exports, "OpnsenseUnboundForward", { enumerable: true, get: function () { return opnsenseUnboundForward_1.OpnsenseUnboundForward; } });
+var opnsenseUnboundAcl_1 = require("./opnsenseUnboundAcl");
+Object.defineProperty(exports, "OpnsenseUnboundAcl", { enumerable: true, get: function () { return opnsenseUnboundAcl_1.OpnsenseUnboundAcl; } });
+var opnsenseUnboundDnsbl_1 = require("./opnsenseUnboundDnsbl");
+Object.defineProperty(exports, "OpnsenseUnboundDnsbl", { enumerable: true, get: function () { return opnsenseUnboundDnsbl_1.OpnsenseUnboundDnsbl; } });
 // Backward compatibility aliases
 var stack_2 = require("./stack");
 Object.defineProperty(exports, "DockgeStack", { enumerable: true, get: function () { return stack_2.DockgeStack; } });

package/opnsenseAlias.d.ts

@@ -0,0 +1,22 @@
+import * as pulumi from "@pulumi/pulumi";
+export interface OpnsenseAliasArgs {
+    /** The alias name. Must be unique. */
+    name: pulumi.Input<string>;
+    /** Alias type: host, network, port, url, or urltable. */
+    type: pulumi.Input<string>;
+    /** Alias content (newline-separated entries, e.g., IP addresses, networks, ports, or URLs). */
+    content?: pulumi.Input<string>;
+    /** Description of the alias. */
+    description?: pulumi.Input<string>;
+    /** Whether the alias is enabled. Default: true. */
+    enabled?: pulumi.Input<boolean>;
+}
+export declare class OpnsenseAlias extends pulumi.CustomResource {
+    readonly uuid: pulumi.Output<string>;
+    readonly name: pulumi.Output<string>;
+    readonly type: pulumi.Output<string>;
+    readonly content: pulumi.Output<string | undefined>;
+    readonly description: pulumi.Output<string | undefined>;
+    readonly enabled: pulumi.Output<boolean>;
+    constructor(name: string, args: OpnsenseAliasArgs, opts?: pulumi.CustomResourceOptions);
+}

package/opnsenseAlias.js

@@ -0,0 +1,52 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OpnsenseAlias = void 0;
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const PLUGIN_VERSION = require("./package.json").version;
+const PLUGIN_DOWNLOAD_URL = "github://api.github.com/tyevco/pulumi-homelab";
+class OpnsenseAlias extends pulumi.CustomResource {
+    constructor(name, args, opts) {
+        super("homelab:index:OpnsenseAlias", name, {
+            uuid: undefined,
+            ...args,
+        }, {
+            version: PLUGIN_VERSION,
+            pluginDownloadURL: PLUGIN_DOWNLOAD_URL,
+            ...opts,
+        });
+    }
+}
+exports.OpnsenseAlias = OpnsenseAlias;

package/opnsenseFirewallRule.d.ts

@@ -0,0 +1,49 @@
+import * as pulumi from "@pulumi/pulumi";
+export interface OpnsenseFirewallRuleArgs {
+    /** Rule action: pass, block, or reject. */
+    action: pulumi.Input<string>;
+    /** Network interface (e.g., lan, wan, opt1). */
+    interface: pulumi.Input<string>;
+    /** Description of the firewall rule. */
+    description?: pulumi.Input<string>;
+    /** IP protocol version: inet (IPv4), inet6 (IPv6), or inet46 (both). Default: inet. */
+    ipprotocol?: pulumi.Input<string>;
+    /** Protocol to match (e.g., any, TCP, UDP, TCP/UDP, ICMP). Default: any. */
+    protocol?: pulumi.Input<string>;
+    /** Source network or address (e.g., any, 192.168.1.0/24, or an alias name). */
+    sourceNet?: pulumi.Input<string>;
+    /** Source port or port range. */
+    sourcePort?: pulumi.Input<string>;
+    /** Destination network or address. */
+    destinationNet?: pulumi.Input<string>;
+    /** Destination port or port range. */
+    destinationPort?: pulumi.Input<string>;
+    /** Traffic direction: in or out. Default: in. */
+    direction?: pulumi.Input<string>;
+    /** Whether to log packets matching this rule. */
+    log?: pulumi.Input<boolean>;
+    /** Apply quick match (stop processing after this rule). Default: true. */
+    quick?: pulumi.Input<boolean>;
+    /** Whether the rule is disabled. */
+    disabled?: pulumi.Input<boolean>;
+    /** Rule priority/order sequence number. */
+    sequence?: pulumi.Input<number>;
+}
+export declare class OpnsenseFirewallRule extends pulumi.CustomResource {
+    readonly uuid: pulumi.Output<string>;
+    readonly action: pulumi.Output<string>;
+    readonly interface: pulumi.Output<string>;
+    readonly description: pulumi.Output<string | undefined>;
+    readonly ipprotocol: pulumi.Output<string>;
+    readonly protocol: pulumi.Output<string>;
+    readonly sourceNet: pulumi.Output<string | undefined>;
+    readonly sourcePort: pulumi.Output<string | undefined>;
+    readonly destinationNet: pulumi.Output<string | undefined>;
+    readonly destinationPort: pulumi.Output<string | undefined>;
+    readonly direction: pulumi.Output<string>;
+    readonly log: pulumi.Output<boolean | undefined>;
+    readonly quick: pulumi.Output<boolean>;
+    readonly disabled: pulumi.Output<boolean | undefined>;
+    readonly sequence: pulumi.Output<number | undefined>;
+    constructor(name: string, args: OpnsenseFirewallRuleArgs, opts?: pulumi.CustomResourceOptions);
+}

package/opnsenseFirewallRule.js

@@ -0,0 +1,52 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OpnsenseFirewallRule = void 0;
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const PLUGIN_VERSION = require("./package.json").version;
+const PLUGIN_DOWNLOAD_URL = "github://api.github.com/tyevco/pulumi-homelab";
+class OpnsenseFirewallRule extends pulumi.CustomResource {
+    constructor(name, args, opts) {
+        super("homelab:index:OpnsenseFirewallRule", name, {
+            uuid: undefined,
+            ...args,
+        }, {
+            version: PLUGIN_VERSION,
+            pluginDownloadURL: PLUGIN_DOWNLOAD_URL,
+            ...opts,
+        });
+    }
+}
+exports.OpnsenseFirewallRule = OpnsenseFirewallRule;

package/opnsenseUnboundAcl.d.ts

@@ -0,0 +1,22 @@
+import * as pulumi from "@pulumi/pulumi";
+export interface OpnsenseUnboundAclArgs {
+    /** Whether the ACL is enabled. Default: true. */
+    enabled?: pulumi.Input<boolean>;
+    /** ACL name. Must be unique. */
+    name: pulumi.Input<string>;
+    /** ACL action: allow, deny, refuse, allow_snoop, deny_non_local, refuse_non_local. Default: "allow". */
+    action?: pulumi.Input<string>;
+    /** Networks covered by this ACL (comma-separated CIDR). */
+    networks: pulumi.Input<string>;
+    /** Description of the ACL. */
+    description?: pulumi.Input<string>;
+}
+export declare class OpnsenseUnboundAcl extends pulumi.CustomResource {
+    readonly uuid: pulumi.Output<string>;
+    readonly enabled: pulumi.Output<boolean>;
+    readonly name: pulumi.Output<string>;
+    readonly action: pulumi.Output<string>;
+    readonly networks: pulumi.Output<string>;
+    readonly description: pulumi.Output<string | undefined>;
+    constructor(name: string, args: OpnsenseUnboundAclArgs, opts?: pulumi.CustomResourceOptions);
+}

package/opnsenseUnboundAcl.js

@@ -0,0 +1,52 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OpnsenseUnboundAcl = void 0;
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const PLUGIN_VERSION = require("./package.json").version;
+const PLUGIN_DOWNLOAD_URL = "github://api.github.com/tyevco/pulumi-homelab";
+class OpnsenseUnboundAcl extends pulumi.CustomResource {
+    constructor(name, args, opts) {
+        super("homelab:index:OpnsenseUnboundAcl", name, {
+            uuid: undefined,
+            ...args,
+        }, {
+            version: PLUGIN_VERSION,
+            pluginDownloadURL: PLUGIN_DOWNLOAD_URL,
+            ...opts,
+        });
+    }
+}
+exports.OpnsenseUnboundAcl = OpnsenseUnboundAcl;

package/opnsenseUnboundDnsbl.d.ts

@@ -0,0 +1,40 @@
+import * as pulumi from "@pulumi/pulumi";
+export interface OpnsenseUnboundDnsblArgs {
+    /** Whether the DNSBL entry is enabled. Default: true. */
+    enabled?: pulumi.Input<boolean>;
+    /** DNSBL type. */
+    type?: pulumi.Input<string>;
+    /** DNSBL lists to use. */
+    lists?: pulumi.Input<string>;
+    /** Allowlisted domains. */
+    allowlists?: pulumi.Input<string>;
+    /** Blocklisted domains. */
+    blocklists?: pulumi.Input<string>;
+    /** Wildcard domain entries. */
+    wildcards?: pulumi.Input<string>;
+    /** Source networks. */
+    sourceNets?: pulumi.Input<string>;
+    /** Listen address. */
+    address?: pulumi.Input<string>;
+    /** Whether to return NXDOMAIN instead of the blocklist address. */
+    nxdomain?: pulumi.Input<boolean>;
+    /** Cache TTL in seconds. Default: 72000. */
+    cacheTtl?: pulumi.Input<number>;
+    /** Description of the DNSBL entry. */
+    description: pulumi.Input<string>;
+}
+export declare class OpnsenseUnboundDnsbl extends pulumi.CustomResource {
+    readonly uuid: pulumi.Output<string>;
+    readonly enabled: pulumi.Output<boolean>;
+    readonly type: pulumi.Output<string | undefined>;
+    readonly lists: pulumi.Output<string | undefined>;
+    readonly allowlists: pulumi.Output<string | undefined>;
+    readonly blocklists: pulumi.Output<string | undefined>;
+    readonly wildcards: pulumi.Output<string | undefined>;
+    readonly sourceNets: pulumi.Output<string | undefined>;
+    readonly address: pulumi.Output<string | undefined>;
+    readonly nxdomain: pulumi.Output<boolean | undefined>;
+    readonly cacheTtl: pulumi.Output<number>;
+    readonly description: pulumi.Output<string>;
+    constructor(name: string, args: OpnsenseUnboundDnsblArgs, opts?: pulumi.CustomResourceOptions);
+}

package/opnsenseUnboundDnsbl.js

@@ -0,0 +1,52 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OpnsenseUnboundDnsbl = void 0;
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const PLUGIN_VERSION = require("./package.json").version;
+const PLUGIN_DOWNLOAD_URL = "github://api.github.com/tyevco/pulumi-homelab";
+class OpnsenseUnboundDnsbl extends pulumi.CustomResource {
+    constructor(name, args, opts) {
+        super("homelab:index:OpnsenseUnboundDnsbl", name, {
+            uuid: undefined,
+            ...args,
+        }, {
+            version: PLUGIN_VERSION,
+            pluginDownloadURL: PLUGIN_DOWNLOAD_URL,
+            ...opts,
+        });
+    }
+}
+exports.OpnsenseUnboundDnsbl = OpnsenseUnboundDnsbl;

package/opnsenseUnboundForward.d.ts

@@ -0,0 +1,34 @@
+import * as pulumi from "@pulumi/pulumi";
+export interface OpnsenseUnboundForwardArgs {
+    /** Whether the forward is enabled. Default: true. */
+    enabled?: pulumi.Input<boolean>;
+    /** Forward type: "forward" or "dot" (DNS over TLS). Default: "forward". */
+    type?: pulumi.Input<string>;
+    /** Domain to forward queries for (empty for all). */
+    domain?: pulumi.Input<string>;
+    /** DNS server IP address. */
+    server: pulumi.Input<string>;
+    /** DNS server port. */
+    port?: pulumi.Input<number>;
+    /** TLS verification hostname (for DoT). */
+    verify?: pulumi.Input<string>;
+    /** Whether to use TCP for upstream queries. Default: false. */
+    forwardTcpUpstream?: pulumi.Input<boolean>;
+    /** Whether to try forwarding first before resolving. Default: false. */
+    forwardFirst?: pulumi.Input<boolean>;
+    /** Description of the forward entry. */
+    description?: pulumi.Input<string>;
+}
+export declare class OpnsenseUnboundForward extends pulumi.CustomResource {
+    readonly uuid: pulumi.Output<string>;
+    readonly enabled: pulumi.Output<boolean>;
+    readonly type: pulumi.Output<string>;
+    readonly domain: pulumi.Output<string | undefined>;
+    readonly server: pulumi.Output<string>;
+    readonly port: pulumi.Output<number | undefined>;
+    readonly verify: pulumi.Output<string | undefined>;
+    readonly forwardTcpUpstream: pulumi.Output<boolean>;
+    readonly forwardFirst: pulumi.Output<boolean>;
+    readonly description: pulumi.Output<string | undefined>;
+    constructor(name: string, args: OpnsenseUnboundForwardArgs, opts?: pulumi.CustomResourceOptions);
+}

package/opnsenseUnboundForward.js

@@ -0,0 +1,52 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OpnsenseUnboundForward = void 0;
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const PLUGIN_VERSION = require("./package.json").version;
+const PLUGIN_DOWNLOAD_URL = "github://api.github.com/tyevco/pulumi-homelab";
+class OpnsenseUnboundForward extends pulumi.CustomResource {
+    constructor(name, args, opts) {
+        super("homelab:index:OpnsenseUnboundForward", name, {
+            uuid: undefined,
+            ...args,
+        }, {
+            version: PLUGIN_VERSION,
+            pluginDownloadURL: PLUGIN_DOWNLOAD_URL,
+            ...opts,
+        });
+    }
+}
+exports.OpnsenseUnboundForward = OpnsenseUnboundForward;

package/opnsenseUnboundHostOverride.d.ts

@@ -0,0 +1,40 @@
+import * as pulumi from "@pulumi/pulumi";
+export interface OpnsenseUnboundHostOverrideArgs {
+    /** Whether the host override is enabled. Default: true. */
+    enabled?: pulumi.Input<boolean>;
+    /** Hostname (e.g., "myhost"). */
+    hostname?: pulumi.Input<string>;
+    /** Domain name (e.g., "example.com"). */
+    domain: pulumi.Input<string>;
+    /** DNS record type (A, AAAA, MX, TXT). Default: "A". */
+    rr?: pulumi.Input<string>;
+    /** IP address or target for the override. */
+    server?: pulumi.Input<string>;
+    /** MX priority (for MX records). */
+    mxprio?: pulumi.Input<number>;
+    /** MX mail server hostname. */
+    mx?: pulumi.Input<string>;
+    /** TXT record data. */
+    txtdata?: pulumi.Input<string>;
+    /** TTL in seconds. */
+    ttl?: pulumi.Input<number>;
+    /** Whether to create a PTR record. Default: true. */
+    addptr?: pulumi.Input<boolean>;
+    /** Description of the host override. */
+    description?: pulumi.Input<string>;
+}
+export declare class OpnsenseUnboundHostOverride extends pulumi.CustomResource {
+    readonly uuid: pulumi.Output<string>;
+    readonly enabled: pulumi.Output<boolean>;
+    readonly hostname: pulumi.Output<string | undefined>;
+    readonly domain: pulumi.Output<string>;
+    readonly rr: pulumi.Output<string>;
+    readonly server: pulumi.Output<string | undefined>;
+    readonly mxprio: pulumi.Output<number | undefined>;
+    readonly mx: pulumi.Output<string | undefined>;
+    readonly txtdata: pulumi.Output<string | undefined>;
+    readonly ttl: pulumi.Output<number | undefined>;
+    readonly addptr: pulumi.Output<boolean>;
+    readonly description: pulumi.Output<string | undefined>;
+    constructor(name: string, args: OpnsenseUnboundHostOverrideArgs, opts?: pulumi.CustomResourceOptions);
+}

package/opnsenseUnboundHostOverride.js

@@ -0,0 +1,52 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OpnsenseUnboundHostOverride = void 0;
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const PLUGIN_VERSION = require("./package.json").version;
+const PLUGIN_DOWNLOAD_URL = "github://api.github.com/tyevco/pulumi-homelab";
+class OpnsenseUnboundHostOverride extends pulumi.CustomResource {
+    constructor(name, args, opts) {
+        super("homelab:index:OpnsenseUnboundHostOverride", name, {
+            uuid: undefined,
+            ...args,
+        }, {
+            version: PLUGIN_VERSION,
+            pluginDownloadURL: PLUGIN_DOWNLOAD_URL,
+            ...opts,
+        });
+    }
+}
+exports.OpnsenseUnboundHostOverride = OpnsenseUnboundHostOverride;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tyevco/pulumi-homelab",
-  "version": "0.1.3",
+  "version": "0.2.0",
   "description": "Pulumi SDK for managing homelab infrastructure",
   "main": "index.js",
   "typings": "index.d.ts",

package/provider.d.ts

@@ -7,11 +7,23 @@ import * as pulumi from "@pulumi/pulumi";
 export declare class Provider extends pulumi.ProviderResource {
     readonly url: pulumi.Output<string>;
     readonly apiKey: pulumi.Output<string>;
-    constructor(name: string, args: ProviderArgs, opts?: pulumi.ResourceOptions);
+    readonly opnsenseUrl: pulumi.Output<string>;
+    readonly opnsenseApiKey: pulumi.Output<string>;
+    readonly opnsenseApiSecret: pulumi.Output<string>;
+    readonly opnsenseInsecure: pulumi.Output<boolean>;
+    constructor(name: string, args?: ProviderArgs, opts?: pulumi.ResourceOptions);
 }
 export interface ProviderArgs {
     /** The URL of the Dockge server (e.g., http://192.168.1.100:5001) */
-    url: pulumi.Input<string>;
+    url?: pulumi.Input<string>;
     /** API key for authenticating with the Dockge REST API */
-    apiKey: pulumi.Input<string>;
+    apiKey?: pulumi.Input<string>;
+    /** The URL of the OPNsense server (e.g., https://192.168.1.1) */
+    opnsenseUrl?: pulumi.Input<string>;
+    /** API key for authenticating with the OPNsense REST API */
+    opnsenseApiKey?: pulumi.Input<string>;
+    /** API secret for authenticating with the OPNsense REST API */
+    opnsenseApiSecret?: pulumi.Input<string>;
+    /** Skip TLS certificate verification for OPNsense API (default: false) */
+    opnsenseInsecure?: pulumi.Input<boolean>;
 }

package/provider.js

@@ -45,8 +45,12 @@ const PLUGIN_DOWNLOAD_URL = "github://api.github.com/tyevco/pulumi-homelab";
 class Provider extends pulumi.ProviderResource {
     constructor(name, args, opts) {
         const inputs = {
-            url: args.url,
-            apiKey: args.apiKey,
+            url: args?.url,
+            apiKey: args?.apiKey,
+            opnsenseUrl: args?.opnsenseUrl,
+            opnsenseApiKey: args?.opnsenseApiKey,
+            opnsenseApiSecret: args?.opnsenseApiSecret,
+            opnsenseInsecure: args?.opnsenseInsecure,
         };
         super("homelab", name, inputs, {
             version: PLUGIN_VERSION,