Public Access
f.weber
103ad311b7
Provides a self-contained, containerized aptly (Debian repo manager) stack with independently releasable image and Helm chart versions. - images/: aptly-server (aptly built from source, cross-compiled) and aptly-deb-builder (nfpm + dpkg-buildpackage) container images - rootfs/: shared aptly-init/aptly-reconcile/aptly-push/aptly-pack scripts consumed identically by Compose and the Helm chart, driven by one declarative state.yaml contract - compose/: test (ephemeral, open) and production docker-compose stacks with an nginx read/auth sidecar - charts/aptly/: aptly-native Helm chart covering every security posture from fully open to authenticated read+write, Ingress and Gateway API support (usable in parallel for migration scenarios), metrics, and declarative repo/mirror/publish reconciliation via a Helm hook - .gitea/workflows/: CI (lint, template, kubeconform, E2E smoke test) plus separately tagged image (image/v*) and chart (chart/v*) releases, weekly rebuilds, and a preflight workflow validating the runner's Docker/Helm-OCI capabilities - pubkeys/: RSA chart-signing key for Helm --sign / Artifact Hub's signKey annotation (Helm can't verify Ed25519 keys) - docs/, README.md, charts/aptly/README.md: usage, security, and versioning documentation
17 lines
696 B
YAML
17 lines
696 B
YAML
# Source aptly config, rendered by aptly-init into /run/aptly/aptly.yaml.
|
|
# ${VAR}-style placeholders are resolved against the aptly container's
|
|
# environment at startup — see .env.example for what to set.
|
|
#
|
|
# This one file is shared by both docker-compose.test.yaml and
|
|
# docker-compose.yaml (production); the security posture (auth, network
|
|
# exposure) is entirely an nginx concern (see nginx.test.conf / nginx.prod.conf),
|
|
# not an aptly config concern — aptly itself never changes between the two.
|
|
root_dir: /var/lib/aptly
|
|
log_level: info
|
|
gpg_provider: internal
|
|
serve_in_api_mode: false
|
|
filesystem_publish_endpoints:
|
|
public:
|
|
root_dir: /var/lib/aptly/public
|
|
link_method: hardlink
|