Public Access
f.weber
103ad311b7
Provides a self-contained, containerized aptly (Debian repo manager) stack with independently releasable image and Helm chart versions. - images/: aptly-server (aptly built from source, cross-compiled) and aptly-deb-builder (nfpm + dpkg-buildpackage) container images - rootfs/: shared aptly-init/aptly-reconcile/aptly-push/aptly-pack scripts consumed identically by Compose and the Helm chart, driven by one declarative state.yaml contract - compose/: test (ephemeral, open) and production docker-compose stacks with an nginx read/auth sidecar - charts/aptly/: aptly-native Helm chart covering every security posture from fully open to authenticated read+write, Ingress and Gateway API support (usable in parallel for migration scenarios), metrics, and declarative repo/mirror/publish reconciliation via a Helm hook - .gitea/workflows/: CI (lint, template, kubeconform, E2E smoke test) plus separately tagged image (image/v*) and chart (chart/v*) releases, weekly rebuilds, and a preflight workflow validating the runner's Docker/Helm-OCI capabilities - pubkeys/: RSA chart-signing key for Helm --sign / Artifact Hub's signKey annotation (Helm can't verify Ed25519 keys) - docs/, README.md, charts/aptly/README.md: usage, security, and versioning documentation
33 lines
438 B
Plaintext
33 lines
438 B
Plaintext
# Local secrets / working data — never commit these
|
|
compose/.env
|
|
compose/data/
|
|
compose/config/users
|
|
compose/config/*.key
|
|
compose/config/*-key.asc
|
|
compose/config/gpg/*
|
|
!compose/config/gpg/.gitkeep
|
|
compose/backup/*
|
|
!compose/backup/.gitkeep
|
|
*.gpg
|
|
*.asc
|
|
!pubkeys/*.asc
|
|
secring.gpg
|
|
*.deb
|
|
*.tgz
|
|
*.tgz.prov
|
|
|
|
# Helm
|
|
charts/*/charts/
|
|
charts/*/Chart.lock
|
|
|
|
# Editors / OS / tooling
|
|
.DS_Store
|
|
*.swp
|
|
.idea/
|
|
.vscode/
|
|
.claude/
|
|
|
|
# Scratch
|
|
*.tmp
|
|
/dist/
|