Configure Python

BEFOREhttps://pypi.org/simple

AFTERhttp://localhost:23333/pypi/simple/

The Portal only generates configuration

Select Python and the matching client in the Depsilo Portal to get configuration generated for the current instance address. The Portal displays and copies content; it does not change your machine or project files.

Configure a client

All three clients use the same /pypi/simple/ endpoint. Prefer project-scoped configuration. Before changing a user-level index, record its previous value so you have a clear rollback path.

pip

~/.config/pip/pip.conf

[global]
index-url = http://localhost:23333/pypi/simple/
# Plain HTTP only:
trusted-host = localhost:23333

You can also ask pip to update its user-level configuration:

pip config set global.index-url http://localhost:23333/pypi/simple/
# Plain HTTP only:
pip config set global.trusted-host localhost:23333

uv

pyproject.toml

[[tool.uv.index]]
name = "depsilo"
url = "http://localhost:23333/pypi/simple/"
default = true

Set default = true so uv resolves packages through Depsilo by default instead of using a public index in parallel.

Poetry

poetry source add --priority=primary depsilo \
  http://localhost:23333/pypi/simple/

The equivalent project configuration is:

pyproject.toml

[[tool.poetry.source]]
name = "depsilo"
url = "http://localhost:23333/pypi/simple/"
priority = "primary"

Do not use extra-index-url as a public fallback

pip considers candidates from multiple indexes together. A public PyPI extra-index-url can bypass a Depsilo policy decision. When every request must be enforced, keep a single controlled entry point and pair it with network egress controls.

Verify the request path

1. Check that the instance is ready

   curl -fsS http://localhost:23333/ready

2. Make a request without changing the environment

   pip install --dry-run --ignore-installed --no-cache-dir --no-deps \
     --index-url http://localhost:23333/pypi/simple/ six

3. Confirm the traffic in Admin

   Open Access logs (/admin/logs) in Admin and confirm the ecosystem, package name, and response status. A successful install by itself does not prove the request used Depsilo.

Use it in CI

Override the index with CI environment variables without rewriting a requirements file. Replace the example hostname with a Depsilo address the runner can actually reach:

export PIP_INDEX_URL=http://depsilo.internal:23333/pypi/simple/
# Plain HTTP only:
export PIP_TRUSTED_HOST=depsilo.internal:23333

pip install -r requirements.txt

If CI runs inside a container, localhost refers to that container, not to Depsilo on the host.

Common issues

Does HTTPS still need trusted-host?

No. trusted-host is an exception for plain HTTP. Remove it when Depsilo is served with a valid HTTPS certificate.

How do I roll back?

Restore the original index you recorded before configuration, then resolve or install once. Do not add a parallel public fallback as a rollback mechanism; it makes the request path unpredictable.

Which endpoint do other Python clients use?

Pipenv and PDM also use /pypi/simple/. Select the matching client in the Portal and copy its project-scoped configuration.