coder-modules

Reusable Terraform modules for Coder workspace templates.

modules/t3-server installs and starts the T3 Code headless server on a Coder agent. It creates an owner-only T3 Code app, listening on loopback port 3773 by default.

module "t3_server" {
  source = "./modules/t3-server"

  agent_id          = coder_agent.main.id
  working_directory = "/home/coder"
  initial_repositories = [
    {
      url       = "https://github.com/example/project.git"
      directory = "project"
    },
  ]
}

T3 is installed only when absent. Use channel (stable or nightly) to choose the first-install release train, or t3_version to pin an exact first install. The module leaves T3 state in $HOME/.t3, adds $HOME/.local/bin to the agent PATH, and records server logs at $HOME/.t3/logs/server.log.

Repositories supplied through initial_repositories are cloned once into $HOME/git/<directory> and registered as T3 projects before the server starts. Each URL must be HTTPS and each directory must be a simple filename.

modules/ecr-credential-helper installs the Amazon ECR Docker credential helper for a Coder user and configures named ECR account/region registries without replacing other Docker credentials.

module "ecr_credential_helper" {
  source   = "./modules/ecr-credential-helper"
  agent_id = coder_agent.main.id

  registries = [
    { account_id = "111122223333", region = "us-east-1" },
    { account_id = "444455556666", region = "us-west-2" },
  ]
}

The agent user needs AWS credentials with access to the configured ECR repositories when it runs Docker.

modules/git-credential-coder configures a host-scoped Git HTTPS credential helper that retrieves fresh credentials from Coder external authentication. It avoids persisting access tokens and works for Git commands that run outside an interactive shell.

module "git_credential_coder" {
  source   = "./modules/git-credential-coder"
  agent_id = coder_agent.main.id
}