A Terraform provider for Dokploy

Plugin-framework provider covering projects, environments, applications,
Compose stacks, managed databases, domains, mounts, ports, redirects,
basic auth, registries, SSH keys, certificates and backup destinations,
over Dokploy's tRPC-over-REST API.

The shim package exposes the provider to other Go modules, which is how
pulumi-dokploy bridges it.

.agents/skills/terraform-test/references/CI_CD.md

@@ -0,0 +1,80 @@
+# CI/CD Integration
+
+## GitHub Actions
+
+```yaml
+name: Terraform Tests
+
+on:
+  pull_request:
+    branches: [ main ]
+  push:
+    branches: [ main ]
+
+jobs:
+  unit-tests:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: hashicorp/setup-terraform@v3
+        with:
+          terraform_version: 1.9.0
+
+      - run: terraform fmt -check -recursive
+      - run: terraform init
+      - run: terraform validate
+      - name: Run unit tests (plan mode, no credentials needed)
+        run: terraform test -filter=unit_test -verbose
+
+  integration-tests:
+    runs-on: ubuntu-latest
+    needs: unit-tests
+    if: github.ref == 'refs/heads/main'
+    steps:
+      - uses: actions/checkout@v4
+      - uses: hashicorp/setup-terraform@v3
+        with:
+          terraform_version: 1.9.0
+
+      - run: terraform init
+      - name: Run integration tests
+        run: terraform test -filter=integration_test -verbose
+        env:
+          AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
+          AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+```
+
+## GitLab CI
+
+```yaml
+stages:
+  - validate
+  - test
+
+terraform-unit-tests:
+  image: hashicorp/terraform:1.9
+  stage: validate
+  before_script:
+    - terraform init
+  script:
+    - terraform fmt -check -recursive
+    - terraform validate
+    - terraform test -filter=unit_test -verbose
+
+terraform-integration-tests:
+  image: hashicorp/terraform:1.9
+  stage: test
+  before_script:
+    - terraform init
+  script:
+    - terraform test -filter=integration_test -verbose
+  only:
+    - main
+```
+
+## Recommended CI Strategy
+
+- Run unit tests (plan mode + mock tests) on every PR — fast, no credentials needed
+- Run integration tests only on merge to main or nightly — requires cloud credentials
+- Use `-filter=unit_test` / `-filter=integration_test` to separate test types based on naming convention
+- Store cloud credentials as CI secrets, never in code