@tyevco/pulumi-homelab 0.5.4 → 0.6.0

package/dockgeStack.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DockgeStack = void 0;
+// Backward compatibility — re-exports from renamed module
+var stack_1 = require("./stack");
+Object.defineProperty(exports, "DockgeStack", { enumerable: true, get: function () { return stack_1.DockgeStack; } });

package/index.d.ts

@@ -0,0 +1,13 @@
+export { Provider, ProviderArgs } from "./provider";
+export { Stack, StackArgs, ContainerInfo, ExtraFile } from "./stack";
+export { TraefikStaticConfig, TraefikStaticConfigArgs } from "./traefikStaticConfig";
+export { TraefikRoute, TraefikRouteArgs } from "./traefikRoute";
+export { OpnsenseFirewallRule, OpnsenseFirewallRuleArgs } from "./opnsenseFirewallRule";
+export { OpnsenseAlias, OpnsenseAliasArgs } from "./opnsenseAlias";
+export { OpnsenseUnboundHostOverride, OpnsenseUnboundHostOverrideArgs } from "./opnsenseUnboundHostOverride";
+export { OpnsenseUnboundForward, OpnsenseUnboundForwardArgs } from "./opnsenseUnboundForward";
+export { OpnsenseUnboundAcl, OpnsenseUnboundAclArgs } from "./opnsenseUnboundAcl";
+export { OpnsenseUnboundDnsbl, OpnsenseUnboundDnsblArgs } from "./opnsenseUnboundDnsbl";
+export { LxcContainer, LxcContainerArgs } from "./lxcContainer";
+export { NotificationSettings, NotificationSettingsArgs } from "./notificationSettings";
+export { UnraidVm, UnraidVmArgs } from "./unraidVm";

package/index.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UnraidVm = exports.NotificationSettings = exports.LxcContainer = exports.OpnsenseUnboundDnsbl = exports.OpnsenseUnboundAcl = exports.OpnsenseUnboundForward = exports.OpnsenseUnboundHostOverride = exports.OpnsenseAlias = exports.OpnsenseFirewallRule = exports.TraefikRoute = exports.TraefikStaticConfig = exports.Stack = exports.Provider = void 0;
+// Provider
+var provider_1 = require("./provider");
+Object.defineProperty(exports, "Provider", { enumerable: true, get: function () { return provider_1.Provider; } });
+// Resources
+var stack_1 = require("./stack");
+Object.defineProperty(exports, "Stack", { enumerable: true, get: function () { return stack_1.Stack; } });
+var traefikStaticConfig_1 = require("./traefikStaticConfig");
+Object.defineProperty(exports, "TraefikStaticConfig", { enumerable: true, get: function () { return traefikStaticConfig_1.TraefikStaticConfig; } });
+var traefikRoute_1 = require("./traefikRoute");
+Object.defineProperty(exports, "TraefikRoute", { enumerable: true, get: function () { return traefikRoute_1.TraefikRoute; } });
+var opnsenseFirewallRule_1 = require("./opnsenseFirewallRule");
+Object.defineProperty(exports, "OpnsenseFirewallRule", { enumerable: true, get: function () { return opnsenseFirewallRule_1.OpnsenseFirewallRule; } });
+var opnsenseAlias_1 = require("./opnsenseAlias");
+Object.defineProperty(exports, "OpnsenseAlias", { enumerable: true, get: function () { return opnsenseAlias_1.OpnsenseAlias; } });
+var opnsenseUnboundHostOverride_1 = require("./opnsenseUnboundHostOverride");
+Object.defineProperty(exports, "OpnsenseUnboundHostOverride", { enumerable: true, get: function () { return opnsenseUnboundHostOverride_1.OpnsenseUnboundHostOverride; } });
+var opnsenseUnboundForward_1 = require("./opnsenseUnboundForward");
+Object.defineProperty(exports, "OpnsenseUnboundForward", { enumerable: true, get: function () { return opnsenseUnboundForward_1.OpnsenseUnboundForward; } });
+var opnsenseUnboundAcl_1 = require("./opnsenseUnboundAcl");
+Object.defineProperty(exports, "OpnsenseUnboundAcl", { enumerable: true, get: function () { return opnsenseUnboundAcl_1.OpnsenseUnboundAcl; } });
+var opnsenseUnboundDnsbl_1 = require("./opnsenseUnboundDnsbl");
+Object.defineProperty(exports, "OpnsenseUnboundDnsbl", { enumerable: true, get: function () { return opnsenseUnboundDnsbl_1.OpnsenseUnboundDnsbl; } });
+var lxcContainer_1 = require("./lxcContainer");
+Object.defineProperty(exports, "LxcContainer", { enumerable: true, get: function () { return lxcContainer_1.LxcContainer; } });
+var notificationSettings_1 = require("./notificationSettings");
+Object.defineProperty(exports, "NotificationSettings", { enumerable: true, get: function () { return notificationSettings_1.NotificationSettings; } });
+var unraidVm_1 = require("./unraidVm");
+Object.defineProperty(exports, "UnraidVm", { enumerable: true, get: function () { return unraidVm_1.UnraidVm; } });

package/lxcContainer.d.ts

@@ -0,0 +1,34 @@
+import * as pulumi from "@pulumi/pulumi";
+export interface LxcContainerArgs {
+    /** The container name. Must match ^[a-z0-9_.-]+$. */
+    name: pulumi.Input<string>;
+    /** The Linux distribution (e.g., ubuntu, debian, alpine). Required unless sourceContainer is set. */
+    dist?: pulumi.Input<string>;
+    /** The distribution release (e.g., jammy, bookworm). Required unless sourceContainer is set. */
+    release?: pulumi.Input<string>;
+    /** The architecture (e.g., amd64, arm64). Required unless sourceContainer is set. */
+    arch?: pulumi.Input<string>;
+    /** Optional LXC container configuration file content. */
+    config?: pulumi.Input<string>;
+    /** Whether the container should autostart (default: false). */
+    autostart?: pulumi.Input<boolean>;
+    /** If set, clone this existing container instead of creating from scratch. Triggers replacement on change. */
+    sourceContainer?: pulumi.Input<string>;
+    /** Config appended after cloning (only used with sourceContainer). Triggers replacement on change. */
+    initialConfig?: pulumi.Input<string>;
+}
+export declare class LxcContainer extends pulumi.CustomResource {
+    readonly name: pulumi.Output<string>;
+    readonly dist: pulumi.Output<string>;
+    readonly release: pulumi.Output<string>;
+    readonly arch: pulumi.Output<string>;
+    readonly config: pulumi.Output<string>;
+    readonly autostart: pulumi.Output<boolean>;
+    readonly status: pulumi.Output<number>;
+    readonly ip: pulumi.Output<string>;
+    readonly pid: pulumi.Output<number>;
+    readonly memory: pulumi.Output<string>;
+    readonly sourceContainer: pulumi.Output<string | undefined>;
+    readonly initialConfig: pulumi.Output<string | undefined>;
+    constructor(name: string, args: LxcContainerArgs, opts?: pulumi.CustomResourceOptions);
+}

package/lxcContainer.js

@@ -0,0 +1,55 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LxcContainer = void 0;
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const PLUGIN_VERSION = require("./package.json").version;
+const PLUGIN_DOWNLOAD_URL = "github://api.github.com/tyevco/pulumi-homelab";
+class LxcContainer extends pulumi.CustomResource {
+    constructor(name, args, opts) {
+        super("homelab:index:LxcContainer", name, {
+            status: undefined,
+            ip: undefined,
+            pid: undefined,
+            memory: undefined,
+            ...args,
+        }, {
+            version: PLUGIN_VERSION,
+            pluginDownloadURL: PLUGIN_DOWNLOAD_URL,
+            ...opts,
+        });
+    }
+}
+exports.LxcContainer = LxcContainer;

package/notificationSettings.d.ts

@@ -0,0 +1,46 @@
+import * as pulumi from "@pulumi/pulumi";
+export interface NotificationSettingsArgs {
+    /** Whether ntfy notifications are enabled. */
+    ntfyEnabled?: pulumi.Input<boolean>;
+    /** ntfy server URL (required when ntfyEnabled is true). */
+    ntfyUrl?: pulumi.Input<string>;
+    /** Whether Discord notifications are enabled. */
+    discordEnabled?: pulumi.Input<boolean>;
+    /** Discord webhook URL (required when discordEnabled is true). */
+    discordWebhookUrl?: pulumi.Input<string>;
+    /** Whether Gotify notifications are enabled. */
+    gotifyEnabled?: pulumi.Input<boolean>;
+    /** Gotify server URL (required when gotifyEnabled is true). */
+    gotifyUrl?: pulumi.Input<string>;
+    /** Gotify application token (required when gotifyEnabled is true). */
+    gotifyToken?: pulumi.Input<string>;
+    /** Whether generic webhook notifications are enabled. */
+    webhookEnabled?: pulumi.Input<boolean>;
+    /** Webhook URL (required when webhookEnabled is true). */
+    webhookUrl?: pulumi.Input<string>;
+}
+/**
+ * Manages notification provider settings on the homelab server.
+ * This is a singleton resource — only one instance should exist per provider.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * const notifications = new homelab.NotificationSettings("notifications", {
+ *   ntfyEnabled: true,
+ *   ntfyUrl: "https://ntfy.sh/my-homelab-alerts",
+ * });
+ * ```
+ */
+export declare class NotificationSettings extends pulumi.CustomResource {
+    readonly ntfyEnabled: pulumi.Output<boolean | undefined>;
+    readonly ntfyUrl: pulumi.Output<string | undefined>;
+    readonly discordEnabled: pulumi.Output<boolean | undefined>;
+    readonly discordWebhookUrl: pulumi.Output<string | undefined>;
+    readonly gotifyEnabled: pulumi.Output<boolean | undefined>;
+    readonly gotifyUrl: pulumi.Output<string | undefined>;
+    readonly gotifyToken: pulumi.Output<string | undefined>;
+    readonly webhookEnabled: pulumi.Output<boolean | undefined>;
+    readonly webhookUrl: pulumi.Output<string | undefined>;
+    constructor(name: string, args?: NotificationSettingsArgs, opts?: pulumi.CustomResourceOptions);
+}

package/notificationSettings.js

@@ -0,0 +1,65 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NotificationSettings = void 0;
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const PLUGIN_VERSION = require("./package.json").version;
+const PLUGIN_DOWNLOAD_URL = "github://api.github.com/tyevco/pulumi-homelab";
+/**
+ * Manages notification provider settings on the homelab server.
+ * This is a singleton resource — only one instance should exist per provider.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * const notifications = new homelab.NotificationSettings("notifications", {
+ *   ntfyEnabled: true,
+ *   ntfyUrl: "https://ntfy.sh/my-homelab-alerts",
+ * });
+ * ```
+ */
+class NotificationSettings extends pulumi.CustomResource {
+    constructor(name, args, opts) {
+        super("homelab:index:NotificationSettings", name, {
+            ...args,
+        }, {
+            version: PLUGIN_VERSION,
+            pluginDownloadURL: PLUGIN_DOWNLOAD_URL,
+            additionalSecretOutputs: ["gotifyToken"],
+            ...opts,
+        });
+    }
+}
+exports.NotificationSettings = NotificationSettings;

package/opnsenseAlias.d.ts

@@ -0,0 +1,22 @@
+import * as pulumi from "@pulumi/pulumi";
+export interface OpnsenseAliasArgs {
+    /** The alias name. Must be unique. */
+    name: pulumi.Input<string>;
+    /** Alias type: host, network, port, mac, url, or urltable. */
+    type: pulumi.Input<string>;
+    /** Alias content (newline-separated entries, e.g., IP addresses, networks, ports, or URLs). */
+    content?: pulumi.Input<string>;
+    /** Description of the alias. */
+    description?: pulumi.Input<string>;
+    /** Whether the alias is enabled. Default: true. */
+    enabled?: pulumi.Input<boolean>;
+}
+export declare class OpnsenseAlias extends pulumi.CustomResource {
+    readonly uuid: pulumi.Output<string>;
+    readonly name: pulumi.Output<string>;
+    readonly type: pulumi.Output<string>;
+    readonly content: pulumi.Output<string | undefined>;
+    readonly description: pulumi.Output<string | undefined>;
+    readonly enabled: pulumi.Output<boolean>;
+    constructor(name: string, args: OpnsenseAliasArgs, opts?: pulumi.CustomResourceOptions);
+}

package/opnsenseAlias.js

@@ -0,0 +1,52 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OpnsenseAlias = void 0;
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const PLUGIN_VERSION = require("./package.json").version;
+const PLUGIN_DOWNLOAD_URL = "github://api.github.com/tyevco/pulumi-homelab";
+class OpnsenseAlias extends pulumi.CustomResource {
+    constructor(name, args, opts) {
+        super("homelab:index:OpnsenseAlias", name, {
+            uuid: undefined,
+            ...args,
+        }, {
+            version: PLUGIN_VERSION,
+            pluginDownloadURL: PLUGIN_DOWNLOAD_URL,
+            ...opts,
+        });
+    }
+}
+exports.OpnsenseAlias = OpnsenseAlias;

package/opnsenseFirewallRule.d.ts

@@ -0,0 +1,49 @@
+import * as pulumi from "@pulumi/pulumi";
+export interface OpnsenseFirewallRuleArgs {
+    /** Rule action: pass, block, or reject. */
+    action: pulumi.Input<string>;
+    /** Network interface (e.g., lan, wan, opt1). */
+    interface: pulumi.Input<string>;
+    /** Description of the firewall rule. */
+    description?: pulumi.Input<string>;
+    /** IP protocol version: inet (IPv4), inet6 (IPv6), or inet46 (both). Default: inet. */
+    ipprotocol?: pulumi.Input<string>;
+    /** Protocol to match (e.g., any, TCP, UDP, TCP/UDP, ICMP). Default: any. */
+    protocol?: pulumi.Input<string>;
+    /** Source network or address (e.g., any, 192.168.1.0/24, or an alias name). */
+    sourceNet?: pulumi.Input<string>;
+    /** Source port or port range. */
+    sourcePort?: pulumi.Input<string>;
+    /** Destination network or address. */
+    destinationNet?: pulumi.Input<string>;
+    /** Destination port or port range. */
+    destinationPort?: pulumi.Input<string>;
+    /** Traffic direction: in or out. Default: in. */
+    direction?: pulumi.Input<string>;
+    /** Whether to log packets matching this rule. */
+    log?: pulumi.Input<boolean>;
+    /** Apply quick match (stop processing after this rule). Default: true. */
+    quick?: pulumi.Input<boolean>;
+    /** Whether the rule is disabled. */
+    disabled?: pulumi.Input<boolean>;
+    /** Rule priority/order sequence number. */
+    sequence?: pulumi.Input<number>;
+}
+export declare class OpnsenseFirewallRule extends pulumi.CustomResource {
+    readonly uuid: pulumi.Output<string>;
+    readonly action: pulumi.Output<string>;
+    readonly interface: pulumi.Output<string>;
+    readonly description: pulumi.Output<string | undefined>;
+    readonly ipprotocol: pulumi.Output<string>;
+    readonly protocol: pulumi.Output<string>;
+    readonly sourceNet: pulumi.Output<string | undefined>;
+    readonly sourcePort: pulumi.Output<string | undefined>;
+    readonly destinationNet: pulumi.Output<string | undefined>;
+    readonly destinationPort: pulumi.Output<string | undefined>;
+    readonly direction: pulumi.Output<string>;
+    readonly log: pulumi.Output<boolean | undefined>;
+    readonly quick: pulumi.Output<boolean>;
+    readonly disabled: pulumi.Output<boolean | undefined>;
+    readonly sequence: pulumi.Output<number | undefined>;
+    constructor(name: string, args: OpnsenseFirewallRuleArgs, opts?: pulumi.CustomResourceOptions);
+}

package/opnsenseFirewallRule.js

@@ -0,0 +1,52 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OpnsenseFirewallRule = void 0;
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const PLUGIN_VERSION = require("./package.json").version;
+const PLUGIN_DOWNLOAD_URL = "github://api.github.com/tyevco/pulumi-homelab";
+class OpnsenseFirewallRule extends pulumi.CustomResource {
+    constructor(name, args, opts) {
+        super("homelab:index:OpnsenseFirewallRule", name, {
+            uuid: undefined,
+            ...args,
+        }, {
+            version: PLUGIN_VERSION,
+            pluginDownloadURL: PLUGIN_DOWNLOAD_URL,
+            ...opts,
+        });
+    }
+}
+exports.OpnsenseFirewallRule = OpnsenseFirewallRule;

package/opnsenseUnboundAcl.d.ts

@@ -0,0 +1,22 @@
+import * as pulumi from "@pulumi/pulumi";
+export interface OpnsenseUnboundAclArgs {
+    /** Whether the ACL is enabled. Default: true. */
+    enabled?: pulumi.Input<boolean>;
+    /** ACL name. Must be unique. */
+    name: pulumi.Input<string>;
+    /** ACL action: allow, deny, refuse, allow_snoop, deny_non_local, refuse_non_local. Default: "allow". */
+    action?: pulumi.Input<string>;
+    /** Networks covered by this ACL (comma-separated CIDR). */
+    networks: pulumi.Input<string>;
+    /** Description of the ACL. */
+    description?: pulumi.Input<string>;
+}
+export declare class OpnsenseUnboundAcl extends pulumi.CustomResource {
+    readonly uuid: pulumi.Output<string>;
+    readonly enabled: pulumi.Output<boolean>;
+    readonly name: pulumi.Output<string>;
+    readonly action: pulumi.Output<string>;
+    readonly networks: pulumi.Output<string>;
+    readonly description: pulumi.Output<string | undefined>;
+    constructor(name: string, args: OpnsenseUnboundAclArgs, opts?: pulumi.CustomResourceOptions);
+}

package/opnsenseUnboundAcl.js

@@ -0,0 +1,52 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OpnsenseUnboundAcl = void 0;
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const PLUGIN_VERSION = require("./package.json").version;
+const PLUGIN_DOWNLOAD_URL = "github://api.github.com/tyevco/pulumi-homelab";
+class OpnsenseUnboundAcl extends pulumi.CustomResource {
+    constructor(name, args, opts) {
+        super("homelab:index:OpnsenseUnboundAcl", name, {
+            uuid: undefined,
+            ...args,
+        }, {
+            version: PLUGIN_VERSION,
+            pluginDownloadURL: PLUGIN_DOWNLOAD_URL,
+            ...opts,
+        });
+    }
+}
+exports.OpnsenseUnboundAcl = OpnsenseUnboundAcl;

package/opnsenseUnboundDnsbl.d.ts

@@ -0,0 +1,40 @@
+import * as pulumi from "@pulumi/pulumi";
+export interface OpnsenseUnboundDnsblArgs {
+    /** Whether the DNSBL entry is enabled. Default: true. */
+    enabled?: pulumi.Input<boolean>;
+    /** DNSBL type. */
+    type?: pulumi.Input<string>;
+    /** DNSBL lists to use. */
+    lists?: pulumi.Input<string>;
+    /** Allowlisted domains. */
+    allowlists?: pulumi.Input<string>;
+    /** Blocklisted domains. */
+    blocklists?: pulumi.Input<string>;
+    /** Wildcard domain entries. */
+    wildcards?: pulumi.Input<string>;
+    /** Source networks. */
+    sourceNets?: pulumi.Input<string>;
+    /** Listen address. */
+    address?: pulumi.Input<string>;
+    /** Whether to return NXDOMAIN instead of the blocklist address. */
+    nxdomain?: pulumi.Input<boolean>;
+    /** Cache TTL in seconds. Default: 72000. */
+    cacheTtl?: pulumi.Input<number>;
+    /** Description of the DNSBL entry. */
+    description: pulumi.Input<string>;
+}
+export declare class OpnsenseUnboundDnsbl extends pulumi.CustomResource {
+    readonly uuid: pulumi.Output<string>;
+    readonly enabled: pulumi.Output<boolean>;
+    readonly type: pulumi.Output<string | undefined>;
+    readonly lists: pulumi.Output<string | undefined>;
+    readonly allowlists: pulumi.Output<string | undefined>;
+    readonly blocklists: pulumi.Output<string | undefined>;
+    readonly wildcards: pulumi.Output<string | undefined>;
+    readonly sourceNets: pulumi.Output<string | undefined>;
+    readonly address: pulumi.Output<string | undefined>;
+    readonly nxdomain: pulumi.Output<boolean | undefined>;
+    readonly cacheTtl: pulumi.Output<number>;
+    readonly description: pulumi.Output<string>;
+    constructor(name: string, args: OpnsenseUnboundDnsblArgs, opts?: pulumi.CustomResourceOptions);
+}

package/opnsenseUnboundDnsbl.js

@@ -0,0 +1,52 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OpnsenseUnboundDnsbl = void 0;
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const PLUGIN_VERSION = require("./package.json").version;
+const PLUGIN_DOWNLOAD_URL = "github://api.github.com/tyevco/pulumi-homelab";
+class OpnsenseUnboundDnsbl extends pulumi.CustomResource {
+    constructor(name, args, opts) {
+        super("homelab:index:OpnsenseUnboundDnsbl", name, {
+            uuid: undefined,
+            ...args,
+        }, {
+            version: PLUGIN_VERSION,
+            pluginDownloadURL: PLUGIN_DOWNLOAD_URL,
+            ...opts,
+        });
+    }
+}
+exports.OpnsenseUnboundDnsbl = OpnsenseUnboundDnsbl;

package/opnsenseUnboundForward.d.ts

@@ -0,0 +1,34 @@
+import * as pulumi from "@pulumi/pulumi";
+export interface OpnsenseUnboundForwardArgs {
+    /** Whether the forward is enabled. Default: true. */
+    enabled?: pulumi.Input<boolean>;
+    /** Forward type: "forward" or "dot" (DNS over TLS). Default: "forward". */
+    type?: pulumi.Input<string>;
+    /** Domain to forward queries for (empty for all). */
+    domain?: pulumi.Input<string>;
+    /** DNS server IP address. */
+    server: pulumi.Input<string>;
+    /** DNS server port. */
+    port?: pulumi.Input<number>;
+    /** TLS verification hostname (for DoT). */
+    verify?: pulumi.Input<string>;
+    /** Whether to use TCP for upstream queries. Default: false. */
+    forwardTcpUpstream?: pulumi.Input<boolean>;
+    /** Whether to try forwarding first before resolving. Default: false. */
+    forwardFirst?: pulumi.Input<boolean>;
+    /** Description of the forward entry. */
+    description?: pulumi.Input<string>;
+}
+export declare class OpnsenseUnboundForward extends pulumi.CustomResource {
+    readonly uuid: pulumi.Output<string>;
+    readonly enabled: pulumi.Output<boolean>;
+    readonly type: pulumi.Output<string>;
+    readonly domain: pulumi.Output<string | undefined>;
+    readonly server: pulumi.Output<string>;
+    readonly port: pulumi.Output<number | undefined>;
+    readonly verify: pulumi.Output<string | undefined>;
+    readonly forwardTcpUpstream: pulumi.Output<boolean>;
+    readonly forwardFirst: pulumi.Output<boolean>;
+    readonly description: pulumi.Output<string | undefined>;
+    constructor(name: string, args: OpnsenseUnboundForwardArgs, opts?: pulumi.CustomResourceOptions);
+}