Update templates and add v0.29.0 changelog

Add new services (audiomuse_ai, erugo, garage, ghostfolio, glean, hermes,
netbox, rustfs, seaweedfs, temporal), update existing ones, and document
v0.29.0 covering configurable operation timeouts and the services update.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Author: adamkrim

CHANGELOG.md

@@ -367,3 +367,29 @@ New services:
 - `elestio_pgduckdb`
 - `elestio_shinyserver`
 - `elestio_unibee`
+
+## v0.29.0
+
+### Configurable operation timeouts
+
+- **New block:** `timeouts` on every service resource. Configure how long the provider waits for `create`, `update`, and `delete` operations to complete.
+- The default per-operation timeout is now **20 minutes** (raised from 15 minutes).
+- The create error message now suggests increasing the timeout when a service takes longer to provision than the wait allows.
+- **New guide:** Operation Timeouts.
+
+### Services update
+
+- Introduced several new services and updated existing ones.
+
+New services:
+
+- `elestio_audiomuse_ai`
+- `elestio_erugo`
+- `elestio_garage`
+- `elestio_ghostfolio`
+- `elestio_glean`
+- `elestio_hermes`
+- `elestio_netbox`
+- `elestio_rustfs`
+- `elestio_seaweedfs`
+- `elestio_temporal`

docs/resources/audiomuse_ai.md

@@ -0,0 +1,221 @@
+---
+# generated by https://github.com/hashicorp/terraform-plugin-docs
+page_title: "elestio_audiomuse_ai Resource - terraform-provider-elestio"
+subcategory: "Services: Applications"
+description: |-
+  AudioMuse-AI is a self-hosted, Dockerized music playlist generator using sonic analysis to discover related tracks for Jellyfin, Navidrome, LMS, Lyrion, and Emby: no metadata or external APIs needed.The elestio_audiomuse_ai resource allows the creation and management of Elestio AudioMuse-AI services. The service uses the following docker image ghcr.io/neptunehub/audiomuse-ai https://hub.docker.com/r/ghcr.io/neptunehub/audiomuse-ai
+---
+
+# elestio_audiomuse_ai (Resource)
+
+<img src="https://cf.appdrag.com/dashboard-openvm-clo-b2d42c/uploads/AudioMuse-AI-YE90.png" width="100" /><br>AudioMuse-AI is a self-hosted, Dockerized music playlist generator using sonic analysis to discover related tracks for Jellyfin, Navidrome, LMS, Lyrion, and Emby: no metadata or external APIs needed.<br><br>The **elestio_audiomuse_ai** resource allows the creation and management of Elestio AudioMuse-AI services. The service uses the following docker image [ghcr.io/neptunehub/audiomuse-ai](https://hub.docker.com/r/ghcr.io/neptunehub/audiomuse-ai)
+
+## Example Usage
+
+```terraform
+resource "elestio_audiomuse_ai" "example" {
+  project_id    = "2500"
+  version       = "latest"
+  provider_name = "netcup"
+  datacenter    = "nbg"
+  server_type   = "MEDIUM-2C-4G"
+
+  # Default firewall rules
+  firewall_user_rules = [
+    # Required system ports
+    {
+      "type"     = "input"
+      "port"     = "22"
+      "protocol" = "tcp"
+      "targets"  = ["0.0.0.0/0", "::/0"]
+    },
+    {
+      "type"     = "input"
+      "port"     = "4242"
+      "protocol" = "udp"
+      "targets"  = ["0.0.0.0/0", "::/0"]
+    },
+    # Application ports
+    {
+      "type"     = "input"
+      "port"     = "80"
+      "protocol" = "tcp"
+      "targets"  = ["0.0.0.0/0", "::/0"]
+    },
+    {
+      "type"     = "input"
+      "port"     = "443"
+      "protocol" = "tcp"
+      "targets"  = ["0.0.0.0/0", "::/0"]
+    },
+    {
+      "type"     = "input"
+      "port"     = "35406"
+      "protocol" = "tcp"
+      "targets"  = ["0.0.0.0/0", "::/0"]
+    }
+  ]
+}
+```
+
+<!-- schema generated by tfplugindocs -->
+## Schema
+
+### Required
+
+- `datacenter` (String) The datacenter of the provider where the service will be hosted. You can look for available datacenters in the [providers documentation](https://registry.terraform.io/providers/elestio/elestio/latest/docs/guides/providers_datacenters_server_types). Requires replace to change it.
+- `project_id` (String) Identifier of the project in which the service is. Requires replace to change it.
+- `provider_name` (String) The name of the provider to use to host the service (must be lowercase). Common providers: `hetzner`, `do`, `lightsail`, `linode`, `vultr`, `scaleway`, `netcup`. You can look for available provider names in the [providers documentation](https://registry.terraform.io/providers/elestio/elestio/latest/docs/guides/providers_datacenters_server_types). Requires replace to change it.
+- `server_type` (String) The server type defines the power and memory allocated to the service. Each `provider_name` has a list of available server types. You can look for available server types in the [providers documentation](https://registry.terraform.io/providers/elestio/elestio/latest/docs/guides/providers_datacenters_server_types). You can only upgrade it, not downgrade.<br/>Requires replace to update the server type with the provider `scale_way`.
+
+### Optional
+
+- `admin_email` (String) Service admin email. Requires replace to change it.
+- `alerts_enabled` (Boolean) Service alerts state. **Default** `true`.
+- `app_auto_updates_enabled` (Boolean) Service app auto update state. **Default** `true`.
+- `backups_enabled` (Boolean) Service backups state.  Requires a support_level higher than `level1`. **Default** `false`.
+- `custom_domain_names` (Set of String) Indicate the list of domains for which you want to activate HTTPS / TLS / SSL. You will also need to create a DNS entry on your domain name (from your registrar control panel) pointing to your service. You must create a CNAME record pointing to the service `cname` value. Alternatively, you can create an A record pointing to the service `ipv4` value.
+- `default_password` (String) Set the default password used by you services at **CREATION** time.</br>The password can only contain alphanumeric characters or hyphens `-`. Require at least 10 characters, one uppercase letter, one lowercase letter and one number.</br>If you don't set a password, a random one will be generated by the API.</br>This attribute will **not be synced** after the creation. Use `admin.password` or `database_admin.password` to get the current password after the creation.
+- `firewall_enabled` (Boolean) Service firewall state. **Default** `true`.
+- `firewall_remove_tool_ports` (Boolean) When `true`, removes API-managed tool ports (VS Code, Terminal, etc.) that are not explicitly defined in `firewall_user_rules`. Tool ports explicitly included in `firewall_user_rules` are user-managed and will always be preserved. **Default** `false`. Use temporarily for cleanup, then reset to `false`.
+- `firewall_user_rules` (Attributes Set) Firewall rules for the service. **Required ports (must use exactly `["0.0.0.0/0", "::/0"]`):** `22/tcp` (SSH), `4242/udp` (Nebula VPN), `80/tcp` (Let's Encrypt for custom domains). When `firewall_enabled` is `false`, set to `[]`. **Software default ports:** `80/tcp`, `443/tcp`, `35406/tcp`. (see [below for nested schema](#nestedatt--firewall_user_rules))
+- `keep_backups_on_delete_enabled` (Boolean) Creates a backup and keeps all existing ones after deleting the service. If the project is deleted, the backups will be lost. **Default** `true`.
+- `local_field` (Dynamic) This field is dynamic and can be used to store any custom data that you want to retrieve later in your configuration. It is not used by the provider.
+- `local_field_sensitive` (Dynamic, Sensitive) Same as `local_field` but the value is sensitive.
+- `remote_backups_enabled` (Boolean) Service remote backups state. **Default** `true`.
+- `server_name` (String) Service server name. Max length 60 characters, and can only include lowercase letters a-z, digits 0-9, and hyphens (-). Must be unique within the project. Requires replace to change it.
+- `ssh_keys` (Attributes Set, Deprecated) This attribute allows you to add SSH keys to your service. (see [below for nested schema](#nestedatt--ssh_keys))
+- `ssh_public_keys` (Attributes Set) You can add Public Keys to your resource to access it via the SSH protocol. (see [below for nested schema](#nestedatt--ssh_public_keys))
+- `support_level` (String) Service support level. Available support levels are `level1`, `level2` and `level3`. You can look for their advantages in the [pricing documentation](https://elest.io/pricing). Requires replace the whole resource to change it in terraform. It is recommended to use the web dashboard to change it without replacing the service.
+- `system_auto_updates_enabled` (Boolean) Service system auto update state. **Default** `true`.
+- `system_auto_updates_security_patches_only_enabled` (Boolean) Service system auto update security patches only state. **Default** `false`.
+- `timeouts` (Block, Optional) (see [below for nested schema](#nestedblock--timeouts))
+- `version` (String) This is the version of the software used as service. **Default** `latest`.
+
+### Read-Only
+
+- `admin` (Attributes, Sensitive) Service admin. (see [below for nested schema](#nestedatt--admin))
+- `admin_user` (String) Service admin user.
+- `app_auto_updates_day_of_week` (Number) Service app auto update day of week. `0 = Sunday`, `1 = Monday`, ..., `6 = Saturday`, `-1 = Everyday`
+- `app_auto_updates_hour` (Number) Service app auto update hour.
+- `app_auto_updates_minute` (Number) Service app auto update minute.
+- `category` (String) Service category.
+- `city` (String) Service city.
+- `cname` (String) Service CNAME.
+- `cores` (Number) Service cores.
+- `country` (String) Service country.
+- `created_at` (String) Service creation date.
+- `creator_name` (String) Service creator name.
+- `database_admin` (Attributes, Sensitive) Service database admin. (see [below for nested schema](#nestedatt--database_admin))
+- `deployment_ended_at` (String) Service deployment endedAt date.
+- `deployment_started_at` (String) Service deployment startedAt date.
+- `deployment_status` (String) Service deployement status.
+- `elestio_id` (Number) Service identifier unique and handled by Elestio.
+- `env` (Map of String, Sensitive) Service environment variables.
+- `external_backups_enabled` (Boolean) Service external backups state. **Default** `false`.
+- `external_backups_retain_day_of_week` (Number) Service external backups retain day of week. `0 = Sunday`, `1 = Monday`, ..., `6 = Saturday`, `-1 = Everyday`
+- `external_backups_update_day_of_week` (Number) Service external backups update day. `0 = Sunday`, `1 = Monday`, ..., `6 = Saturday`, `-1 = Everyday`
+- `external_backups_update_hour` (Number) Service external backups update hour.
+- `external_backups_update_minute` (Number) Service external backups update minute.
+- `external_backups_update_type` (String) Service external backups update type.
+- `firewall_id` (String) Service firewall id.
+- `firewall_ports` (String) Service firewall ports.
+- `firewall_tool_rules` (Attributes Set) API-managed tool ports (VS Code, Terminal, File Explorer, etc.) that are not explicitly defined in `firewall_user_rules`. These ports are automatically managed by the API and will be preserved unless `firewall_remove_tool_ports` is set to `true`. If you want to manage a tool port yourself, include it explicitly in `firewall_user_rules`. (see [below for nested schema](#nestedatt--firewall_tool_rules))
+- `global_ip` (String) Service global IP.
+- `id` (String) Service identifier handled by the provider. The format can change.
+- `ipv4` (String) Service IPv4.
+- `ipv6` (String) Service IPv6.
+- `last_updated` (String)
+- `price_per_hour` (String) Service price per hour.
+- `ram_size_gb` (String) Service ram size in GB.
+- `root_app_path` (String) Service root app path.
+- `status` (String) Service status.
+- `storage_size_gb` (Number) Service storage size in GB.
+- `system_auto_updates_reboot_day_of_week` (Number) Service system auto update reboot day of week. `0 = Sunday`, `1 = Monday`, ..., `6 = Saturday`, `-1 = Everyday`
+- `system_auto_updates_reboot_hour` (Number) Service system auto update reboot hour.
+- `system_auto_updates_reboot_minute` (Number) Service system auto update reboot minute.
+- `template_id` (Number) The template identifier defines the software used. You can look for available template ids in the [templates documentation](https://elest.io/fully-managed-services).
+- `traffic_included` (Number) Service traffic included.
+- `traffic_incoming` (Number) Service traffic incoming.
+- `traffic_outgoing` (Number) Service traffic outgoing.
+
+<a id="nestedatt--firewall_user_rules"></a>
+### Nested Schema for `firewall_user_rules`
+
+Required:
+
+- `port` (String) Port number (`80`, `443`) or range (`8000-9000`).
+- `protocol` (String) The protocol (`tcp` or `udp`).
+- `targets` (Set of String) CIDR blocks allowed to access this port. Use `["0.0.0.0/0", "::/0"]` to allow access from all IPv4/IPv6 addresses. **Note:** Required system ports (22/tcp/input, 4242/udp/input, and 80/tcp/input when using custom domains) must have exactly these two targets and cannot have additional target restrictions.
+- `type` (String) The firewall rule type. Currently only `input` is supported.
+
+
+<a id="nestedatt--ssh_keys"></a>
+### Nested Schema for `ssh_keys`
+
+Required:
+
+- `key_name` (String) SSH Key Name.
+- `public_key` (String, Deprecated) SSH Public Key.The SSH public key should only contain two parts separated by a space. Example: `ssh-rsa AAaCfa...WAqDUNs=`. You should not include the username, hostname, or comment.
+
+
+<a id="nestedatt--ssh_public_keys"></a>
+### Nested Schema for `ssh_public_keys`
+
+Required:
+
+- `key_data` (String) The Public Key value without comment. Use `provider::elestio::parse_ssh_key_data(file("~/.ssh/id_rsa.pub"))` to remove the comment from your key. Read the guide ["How to use SSH keys with Elestio Terraform Provider"](https://registry.terraform.io/providers/elestio/elestio/latest/docs/guides/ssh_keys).
+- `username` (String) The username is used to identify the Public Key among others. Must be unique (per resource).
+
+
+<a id="nestedblock--timeouts"></a>
+### Nested Schema for `timeouts`
+
+Optional:
+
+- `create` (String) A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
+- `delete` (String) A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
+- `update` (String) A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
+
+
+<a id="nestedatt--admin"></a>
+### Nested Schema for `admin`
+
+Read-Only:
+
+- `password` (String) Service admin password.
+- `url` (String) Service admin URL.
+- `user` (String) Service admin user.
+
+
+<a id="nestedatt--database_admin"></a>
+### Nested Schema for `database_admin`
+
+Read-Only:
+
+- `command` (String) Service database admin command.
+- `host` (String) Service database admin host.
+- `password` (String) Service database admin password.
+- `port` (String) Service database admin port.
+- `user` (String) Service database admin user.
+
+
+<a id="nestedatt--firewall_tool_rules"></a>
+### Nested Schema for `firewall_tool_rules`
+
+Read-Only:
+
+- `name` (String) The tool name.
+- `port` (String) Port number.
+- `protocol` (String) The protocol.
+- `targets` (Set of String) CIDR blocks allowed to access this port.
+- `type` (String) The firewall rule type.
+
+## Import
+
+Import is supported using the following syntax:
+
+```shell
+# Import a AudioMuse-AI service by specifying the Project ID it belongs to, and the AudioMuse-AI service ID (spaced by a comma).
+terraform import elestio_audiomuse_ai.my_audiomuse_ai project_id,audiomuse_ai_service_id
+```