A Terraform provider for Dokploy

Plugin-framework provider covering projects, environments, applications, Compose stacks, managed databases, domains, mounts, ports, redirects, basic auth, registries, SSH keys, certificates and backup destinations, over Dokploy's tRPC-over-REST API. The shim package exposes the provider to other Go modules, which is how pulumi-dokploy bridges it.
2026-08-09 12:17:26 +03:00
commit a6d8aa8b52
160 changed files with 24260 additions and 0 deletions
--- a/modules/web-service/main.tf
+++ b/modules/web-service/main.tf
@@ -0,0 +1,113 @@
+terraform {
+  required_version = ">= 1.5"
+  required_providers {
+    dokploy = {
+      source  = "maxvojtkov/dokploy"
+      version = ">= 0.1"
+    }
+  }
+}
+
+locals {
+  # Exactly one source block is populated, chosen by var.service_source.type.
+  is_docker = var.service_source.type == "docker"
+  is_github = var.service_source.type == "github"
+  is_git    = var.service_source.type == "git"
+}
+
+resource "dokploy_application" "this" {
+  name           = var.name
+  description    = var.description
+  environment_id = var.environment_id
+  server_id      = var.server_id
+
+  source_type = var.service_source.type
+
+  # Docker image source
+  docker_image = local.is_docker ? var.service_source.image : null
+  username     = local.is_docker ? var.service_source.registry_username : null
+  password     = local.is_docker ? var.service_source.registry_password : null
+  registry_url = local.is_docker ? var.service_source.registry_url : null
+
+  # GitHub source
+  github_id  = local.is_github ? var.service_source.github_id : null
+  owner      = local.is_github ? var.service_source.owner : null
+  repository = local.is_github ? var.service_source.repository : null
+  branch     = local.is_github ? var.service_source.branch : null
+  build_path = local.is_github ? var.service_source.build_path : null
+
+  # Plain Git source
+  custom_git_url        = local.is_git ? var.service_source.url : null
+  custom_git_branch     = local.is_git ? var.service_source.branch : null
+  custom_git_build_path = local.is_git ? var.service_source.build_path : null
+  custom_git_ssh_key_id = local.is_git ? var.service_source.ssh_key_id : null
+
+  build_type = var.build_type
+  dockerfile = var.dockerfile
+
+  env         = var.env
+  build_args  = var.build_args
+  auto_deploy = var.auto_deploy
+
+  replicas           = var.replicas
+  memory_reservation = var.resources.memory_reservation
+  memory_limit       = var.resources.memory_limit
+  cpu_reservation    = var.resources.cpu_reservation
+  cpu_limit          = var.resources.cpu_limit
+}
+
+resource "dokploy_domain" "this" {
+  for_each = { for domain in var.domains : domain.host => domain }
+
+  application_id   = dokploy_application.this.id
+  domain_type      = "application"
+  host             = each.value.host
+  path             = each.value.path
+  port             = each.value.port
+  https            = each.value.https
+  certificate_type = each.value.https ? each.value.certificate_type : "none"
+  strip_path       = each.value.strip_path
+  internal_path    = each.value.internal_path
+}
+
+resource "dokploy_port" "this" {
+  for_each = { for port in var.published_ports : "${port.protocol}-${port.published_port}" => port }
+
+  application_id = dokploy_application.this.id
+  published_port = each.value.published_port
+  target_port    = each.value.target_port
+  protocol       = each.value.protocol
+  publish_mode   = each.value.publish_mode
+}
+
+resource "dokploy_mount" "this" {
+  for_each = { for mount in var.mounts : mount.mount_path => mount }
+
+  service_id   = dokploy_application.this.id
+  service_type = "application"
+  type         = each.value.type
+  mount_path   = each.value.mount_path
+  volume_name  = each.value.volume_name
+  host_path    = each.value.host_path
+  file_path    = each.value.file_path
+  content      = each.value.content
+}
+
+# count rather than for_each: basic_auth is sensitive, and Terraform refuses to
+# derive resource instance keys from sensitive values.
+resource "dokploy_security" "this" {
+  count = var.basic_auth == null ? 0 : 1
+
+  application_id = dokploy_application.this.id
+  username       = var.basic_auth.username
+  password       = var.basic_auth.password
+}
+
+resource "dokploy_redirect" "this" {
+  for_each = { for redirect in var.redirects : redirect.regex => redirect }
+
+  application_id = dokploy_application.this.id
+  regex          = each.value.regex
+  replacement    = each.value.replacement
+  permanent      = each.value.permanent
+}