.
continuous-integration/drone/push Build was killed
Details
continuous-integration/drone/push Build was killed
Details
This commit is contained in:
parent
64a1e7dfff
commit
43943bafb3
|
|
@ -1,88 +0,0 @@
|
||||||
load("@this//:from-secret.star", "fromSecret")
|
|
||||||
load("@this//:print-secrets.star", "printSecrets")
|
|
||||||
|
|
||||||
load("@this//:map.star", "map")
|
|
||||||
load("@this//:environment.star", "environment")
|
|
||||||
load("@this//:echo.star", "echo")
|
|
||||||
load("@this//:export.star", "export")
|
|
||||||
load("@this//:echo-secret.star", "echoSecret")
|
|
||||||
load("@this//:wait.star", "wait")
|
|
||||||
load("@this//:build.star", "build")
|
|
||||||
load("@this//:scp.star", "scp")
|
|
||||||
load("@this//stack:public-secrets.star", "publicSecrets")
|
|
||||||
load("@this//stack:secret-secrets.star", "secretSecrets")
|
|
||||||
load("@this//:pull.star", "pull")
|
|
||||||
load("@this//:deploy.star", "deploy")
|
|
||||||
load("@this//:build-folder.star", "buildFolder")
|
|
||||||
load("@this//:build-docker-folder.star", "buildDockerFolder")
|
|
||||||
load("@this//:pipeline.star", "pipeline")
|
|
||||||
|
|
||||||
def main(ctx):
|
|
||||||
if ctx.build.branch == 'remote':
|
|
||||||
return [
|
|
||||||
pipeline(
|
|
||||||
'remote-deploy',
|
|
||||||
[
|
|
||||||
printSecrets(
|
|
||||||
"env-stack",
|
|
||||||
publicSecrets,
|
|
||||||
secretSecrets,
|
|
||||||
),
|
|
||||||
wait(15, "wait"),
|
|
||||||
build("guacamole-postgresql"),
|
|
||||||
build("ngrok-gitea"),
|
|
||||||
build("letsencrypt-nginx"),
|
|
||||||
build("drone-starlark"),
|
|
||||||
buildDockerFolder(
|
|
||||||
"Dockerfile.drone",
|
|
||||||
"$${LOCAL_DOCKER_REGISTRY}letsencrypt-nginx",
|
|
||||||
"$${LOCAL_DOCKER_REGISTRY}letsencrypt-drone",
|
|
||||||
"letsencrypt-nginx",
|
|
||||||
"drone",
|
|
||||||
),
|
|
||||||
buildDockerFolder(
|
|
||||||
"Dockerfile.remote",
|
|
||||||
"$${LOCAL_DOCKER_REGISTRY}letsencrypt-nginx",
|
|
||||||
"$${LOCAL_DOCKER_REGISTRY}letsencrypt-remote",
|
|
||||||
"letsencrypt-nginx",
|
|
||||||
"remote",
|
|
||||||
),
|
|
||||||
scp("/home/giles/gitea-drone-stack"),
|
|
||||||
pull([
|
|
||||||
"letsencrypt-drone",
|
|
||||||
"letsencrypt-remote",
|
|
||||||
"drone-starlark",
|
|
||||||
"guacamole-postgresql",
|
|
||||||
]),
|
|
||||||
deploy(
|
|
||||||
"docker-compose-remote.yml",
|
|
||||||
"remote-drone",
|
|
||||||
"/home/giles/gitea-drone-stack",
|
|
||||||
publicSecrets + secretSecrets,
|
|
||||||
),
|
|
||||||
],
|
|
||||||
[],
|
|
||||||
[
|
|
||||||
{
|
|
||||||
"name": "ca",
|
|
||||||
"host": {
|
|
||||||
"path": "/home/giles/gitea-drone-stack/.ca",
|
|
||||||
},
|
|
||||||
}
|
|
||||||
],
|
|
||||||
[
|
|
||||||
{
|
|
||||||
"name": "ca",
|
|
||||||
"path": "/etc/docker/certs.d",
|
|
||||||
},
|
|
||||||
]
|
|
||||||
),
|
|
||||||
]
|
|
||||||
else:
|
|
||||||
return pipeline(
|
|
||||||
ctx.build.branch,
|
|
||||||
[],
|
|
||||||
[],
|
|
||||||
[],
|
|
||||||
[],
|
|
||||||
)
|
|
||||||
|
|
@ -10,7 +10,7 @@ In a [docker](https://www.docker.com/) stack.
|
||||||
|
|
||||||
### docker stack configuration
|
### docker stack configuration
|
||||||
|
|
||||||
[docker-compose-home.yml](docker-compose-home.yml)
|
[docker-compose.yml](docker-compose.yml)
|
||||||
|
|
||||||
## deployments
|
## deployments
|
||||||
|
|
||||||
|
|
@ -215,7 +215,7 @@ sh build.sh $SIGYL_STACK_ROOT
|
||||||
|
|
||||||
```
|
```
|
||||||
cd $SIGYL_STACK_ROOT
|
cd $SIGYL_STACK_ROOT
|
||||||
docker stack deploy -c docker-compose-home.yml $SIGYL_STACK_NAME
|
docker stack deploy -c docker-compose.yml $SIGYL_STACK_NAME
|
||||||
```
|
```
|
||||||
|
|
||||||
### initialise postgres database
|
### initialise postgres database
|
||||||
|
|
@ -264,7 +264,7 @@ export DRONE_GITEA_CLIENT_SECRET=ytsgdyXI_6zUrqwsI1wsssBAaUcsp27EyecT4nk5fA=
|
||||||
### redeploy
|
### redeploy
|
||||||
|
|
||||||
```
|
```
|
||||||
docker stack deploy -c docker-compose-home.yml $SIGYL_STACK_NAME
|
docker stack deploy -c docker-compose.yml $SIGYL_STACK_NAME
|
||||||
sh init-scale.sh stack
|
sh init-scale.sh stack
|
||||||
```
|
```
|
||||||
|
|
||||||
|
|
|
||||||
|
|
@ -1,238 +0,0 @@
|
||||||
version: "3.7"
|
|
||||||
services:
|
|
||||||
letsencrypt-do:
|
|
||||||
deploy:
|
|
||||||
placement:
|
|
||||||
constraints: [node.labels.com.sigyl.git-stack == yes]
|
|
||||||
replicas: 1
|
|
||||||
restart_policy:
|
|
||||||
condition: any
|
|
||||||
image: ${LOCAL_DOCKER_REGISTRY}letsencrypt-do
|
|
||||||
environment:
|
|
||||||
- CERTBOT_EMAIL=${CERTBOT_EMAIL}
|
|
||||||
- SERVER_NAME=${GIT_DOMAIN}
|
|
||||||
- PROXY_PASS=http://gitea:3000/
|
|
||||||
- BLOG_PROXY_PASS=http://ghost:2368
|
|
||||||
- CHAT_PROXY_PASS=http://chat:3000
|
|
||||||
- REMOTE_PROXY_PASS=http://guacamole:8080/guacamole/
|
|
||||||
- DRONE_PROXY_PASS=http://drone-server:8080
|
|
||||||
- REGISTRY_PROXY_PASS=http://registry:5000
|
|
||||||
- LOCATION=/git/
|
|
||||||
- BLOG_LOCATION=/blog/
|
|
||||||
- CHAT_LOCATION=/chat/
|
|
||||||
- REMOTE_LOCATION=/remote/
|
|
||||||
volumes:
|
|
||||||
- letsencrypt-git:/etc/letsencrypt
|
|
||||||
networks:
|
|
||||||
- appnet
|
|
||||||
ports:
|
|
||||||
- 80:80
|
|
||||||
- 443:443
|
|
||||||
- 5000:5000
|
|
||||||
- 5001:5001
|
|
||||||
gitea:
|
|
||||||
deploy:
|
|
||||||
placement:
|
|
||||||
constraints: [node.labels.com.sigyl.git-stack == yes]
|
|
||||||
replicas: 1
|
|
||||||
restart_policy:
|
|
||||||
condition: any
|
|
||||||
image: gitea/gitea:latest
|
|
||||||
environment:
|
|
||||||
- USER_UID=1000
|
|
||||||
- USER_GID=1000
|
|
||||||
- ROOT_URL=https://${GIT_DOMAIN}/git
|
|
||||||
- SSH_DOMAIN=${GIT_DOMAIN}
|
|
||||||
volumes:
|
|
||||||
- gitea-app:/data
|
|
||||||
ports:
|
|
||||||
- 3000
|
|
||||||
- 22:22
|
|
||||||
networks:
|
|
||||||
- appnet
|
|
||||||
ghost:
|
|
||||||
deploy:
|
|
||||||
placement:
|
|
||||||
constraints: [node.labels.com.sigyl.git-stack == yes]
|
|
||||||
replicas: 1
|
|
||||||
restart_policy:
|
|
||||||
condition: any
|
|
||||||
image: ghost
|
|
||||||
volumes:
|
|
||||||
- ghost-content:/var/lib/ghost/content
|
|
||||||
- ./ghost/config.production.json:/var/lib/ghost/config.production.json
|
|
||||||
environment:
|
|
||||||
- url=https://${GIT_DOMAIN}/blog
|
|
||||||
networks:
|
|
||||||
- appnet
|
|
||||||
chat:
|
|
||||||
deploy:
|
|
||||||
placement:
|
|
||||||
constraints: [node.labels.com.sigyl.git-stack-chat == yes]
|
|
||||||
replicas: 1 # will scale after mongo initated
|
|
||||||
restart_policy:
|
|
||||||
condition: any
|
|
||||||
image: rocketchat/rocket.chat:latest
|
|
||||||
networks:
|
|
||||||
- appnet
|
|
||||||
environment:
|
|
||||||
- MONGO_OPLOG_URL=mongodb://chat-mongo:27017/local
|
|
||||||
- ROOT_URL=https://${GIT_DOMAIN}/chat/
|
|
||||||
- ROOT_URL_PATH_PREFIX=chat
|
|
||||||
- PORT=3000
|
|
||||||
- MONGO_URL=mongodb://chat-mongo:27017/rocketchat
|
|
||||||
volumes:
|
|
||||||
- chat-uploads:/app/uploads
|
|
||||||
chat-mongo:
|
|
||||||
deploy:
|
|
||||||
placement:
|
|
||||||
constraints: [node.labels.com.sigyl.git-stack-chat == yes]
|
|
||||||
replicas: 1
|
|
||||||
restart_policy:
|
|
||||||
condition: any
|
|
||||||
image: mongo:4.0
|
|
||||||
networks:
|
|
||||||
- appnet
|
|
||||||
environment:
|
|
||||||
- MONGO_DATA_DIR=/data/db
|
|
||||||
- MONGO_LOG_DIR=/dev/null
|
|
||||||
volumes:
|
|
||||||
- mongo-chat:/data/db
|
|
||||||
command: mongod --smallfiles --replSet rs0 --oplogSize 128
|
|
||||||
drone-server:
|
|
||||||
deploy:
|
|
||||||
placement:
|
|
||||||
constraints: [node.labels.com.sigyl.git-stack == yes]
|
|
||||||
replicas: 1
|
|
||||||
restart_policy:
|
|
||||||
condition: any
|
|
||||||
image: drone/drone:latest
|
|
||||||
volumes:
|
|
||||||
- drone:/var/lib/drone
|
|
||||||
- drone-data:/data
|
|
||||||
depends_on:
|
|
||||||
- gitea
|
|
||||||
environment:
|
|
||||||
- DRONE_LOGS_DEBUG=true
|
|
||||||
- DRONE_LOGS_PRETTY=true
|
|
||||||
- DRONE_GITEA_SERVER=https://${GIT_DOMAIN}/git
|
|
||||||
- DRONE_GITEA_CLIENT_ID=${DRONE_GITEA_CLIENT_ID}
|
|
||||||
- DRONE_GITEA_CLIENT_SECRET=${DRONE_GITEA_CLIENT_SECRET}
|
|
||||||
- DRONE_SERVER_HOST=${GIT_DOMAIN}:5000 # tunnel hostname
|
|
||||||
- DRONE_ADMIN=giles
|
|
||||||
- DRONE_SERVER_PROTO=https # tunnel adds https on top
|
|
||||||
- DRONE_SERVER_PORT=:8080
|
|
||||||
- DRONE_RPC_SECRET=${DRONE_RPC_SECRET}
|
|
||||||
- DRONE_USER_CREATE=username:giles,admin:true
|
|
||||||
- DRONE_AGENTS_ENABLED=true
|
|
||||||
- DRONE_CONVERT_PLUGIN_ENDPOINT=http://drone-starlark:3000
|
|
||||||
- DRONE_CONVERT_PLUGIN_SECRET=${DRONE_CONVERT_SECRET}
|
|
||||||
#- DRONE_ENV_PLUGIN_ENDPOINT=http://git.local-domain:8888
|
|
||||||
#- DRONE_ENV_PLUGIN_TOKEN=anything
|
|
||||||
networks:
|
|
||||||
- appnet
|
|
||||||
drone-docker-runner:
|
|
||||||
deploy:
|
|
||||||
placement:
|
|
||||||
constraints: [node.labels.com.sigyl.git-stack == yes]
|
|
||||||
replicas: 1
|
|
||||||
restart_policy:
|
|
||||||
condition: any
|
|
||||||
image: drone/drone-runner-docker:1
|
|
||||||
depends_on:
|
|
||||||
- drone-server
|
|
||||||
volumes:
|
|
||||||
- /var/run/docker.sock:/var/run/docker.sock
|
|
||||||
environment:
|
|
||||||
- DRONE_RPC_PROTO=https
|
|
||||||
- DRONE_RPC_HOST=${GIT_DOMAIN}:5000
|
|
||||||
- DRONE_RPC_SECRET=${DRONE_RPC_SECRET}
|
|
||||||
- DRONE_RUNNER_CAPACITY=8
|
|
||||||
- DRONE_RUNNER_NAME="docker-runner"
|
|
||||||
#- DRONE_ENV_PLUGIN_ENDPOINT=http://git.local-domain:8888
|
|
||||||
#- DRONE_ENV_PLUGIN_TOKEN=anything
|
|
||||||
drone-starlark:
|
|
||||||
deploy:
|
|
||||||
placement:
|
|
||||||
constraints: [node.labels.com.sigyl.git-stack == yes]
|
|
||||||
replicas: 1
|
|
||||||
restart_policy:
|
|
||||||
condition: any
|
|
||||||
image: ${LOCAL_DOCKER_REGISTRY}drone-starlark
|
|
||||||
environment:
|
|
||||||
- DRONE_DEBUG=true
|
|
||||||
- DRONE_SECRET=${DRONE_CONVERT_SECRET}
|
|
||||||
- DRONE_STARLARK_REPO_PATHS=this:/repos
|
|
||||||
networks:
|
|
||||||
- appnet
|
|
||||||
registry:
|
|
||||||
deploy:
|
|
||||||
placement:
|
|
||||||
constraints: [node.labels.com.sigyl.git-stack == yes]
|
|
||||||
replicas: 1
|
|
||||||
restart_policy:
|
|
||||||
condition: any
|
|
||||||
image: registry:2
|
|
||||||
volumes:
|
|
||||||
- registry-data:/var/lib/registry
|
|
||||||
environment:
|
|
||||||
- REGISTRY_HTTP_ADDR=0.0.0.0:5000
|
|
||||||
networks:
|
|
||||||
- appnet
|
|
||||||
guacamole-postgresql:
|
|
||||||
deploy:
|
|
||||||
placement:
|
|
||||||
constraints: [node.labels.com.sigyl.git-stack-chat == yes]
|
|
||||||
replicas: 1
|
|
||||||
restart_policy:
|
|
||||||
condition: any
|
|
||||||
image: ${LOCAL_DOCKER_REGISTRY}guacamole-postgresql:latest
|
|
||||||
environment:
|
|
||||||
POSTGRES_PASSWORD: ${GUACAMOLE_POSTGRES_PASSWORD}
|
|
||||||
POSTGRES_DB: ${GUACAMOLE_POSTGRES_DB}
|
|
||||||
volumes:
|
|
||||||
- guacamole-postgresql-data:/var/lib/postgresql/data
|
|
||||||
networks:
|
|
||||||
- appnet
|
|
||||||
guacd:
|
|
||||||
deploy:
|
|
||||||
placement:
|
|
||||||
constraints: [node.labels.com.sigyl.git-stack-chat == yes]
|
|
||||||
replicas: 1
|
|
||||||
restart_policy:
|
|
||||||
condition: any
|
|
||||||
image: guacamole/guacd:latest
|
|
||||||
networks:
|
|
||||||
- appnet
|
|
||||||
guacamole:
|
|
||||||
deploy:
|
|
||||||
placement:
|
|
||||||
constraints: [node.labels.com.sigyl.git-stack-chat == yes]
|
|
||||||
replicas: 1
|
|
||||||
restart_policy:
|
|
||||||
condition: any
|
|
||||||
image: guacamole/guacamole:latest
|
|
||||||
environment:
|
|
||||||
- POSTGRES_HOSTNAME=guacamole-postgresql
|
|
||||||
- POSTGRES_PORT=5432
|
|
||||||
- POSTGRES_USER=${GUACAMOLE_POSTGRES_USER}
|
|
||||||
- POSTGRES_PASSWORD=${GUACAMOLE_POSTGRES_PASSWORD}
|
|
||||||
- POSTGRES_DATABASE=${GUACAMOLE_POSTGRES_DB}
|
|
||||||
- GUACD_HOSTNAME=guacd
|
|
||||||
networks:
|
|
||||||
- appnet
|
|
||||||
|
|
||||||
volumes:
|
|
||||||
gitea-db:
|
|
||||||
gitea-app:
|
|
||||||
letsencrypt-git:
|
|
||||||
ghost-content:
|
|
||||||
mongo-chat:
|
|
||||||
chat-uploads:
|
|
||||||
drone:
|
|
||||||
drone-data:
|
|
||||||
registry-data:
|
|
||||||
guacamole-postgresql-data:
|
|
||||||
networks:
|
|
||||||
appnet:
|
|
||||||
driver: overlay
|
|
||||||
|
|
@ -1,238 +0,0 @@
|
||||||
version: "3.7"
|
|
||||||
services:
|
|
||||||
letsencrypt-remote:
|
|
||||||
deploy:
|
|
||||||
placement:
|
|
||||||
constraints: [node.labels.com.sigyl.git-stack == yes]
|
|
||||||
replicas: 1
|
|
||||||
restart_policy:
|
|
||||||
condition: any
|
|
||||||
image: ${LOCAL_DOCKER_REGISTRY}/letsencrypt-remote
|
|
||||||
environment:
|
|
||||||
- SERVER_NAME=${REMOTE_DOMAIN}
|
|
||||||
- CERTBOT_EMAIL=${CERTBOT_EMAIL}
|
|
||||||
- PROXY_PASS=http://guacamole:8080/guacamole/
|
|
||||||
volumes:
|
|
||||||
- letsencrypt-remote:/etc/letsencrypt
|
|
||||||
networks:
|
|
||||||
- appnet
|
|
||||||
depends_on:
|
|
||||||
- guacamole
|
|
||||||
letsencrypt-drone:
|
|
||||||
deploy:
|
|
||||||
placement:
|
|
||||||
constraints: [node.labels.com.sigyl.git-stack == yes]
|
|
||||||
replicas: 1
|
|
||||||
restart_policy:
|
|
||||||
condition: any
|
|
||||||
image: ${LOCAL_DOCKER_REGISTRY}/letsencrypt-drone
|
|
||||||
environment:
|
|
||||||
- CERTBOT_EMAIL=${CERTBOT_EMAIL}
|
|
||||||
- SERVER_NAME=${DRONE_DOMAIN}
|
|
||||||
- PROXY_PASS=http://drone-server:8080/
|
|
||||||
volumes:
|
|
||||||
- letsencrypt-drone:/etc/letsencrypt
|
|
||||||
networks:
|
|
||||||
- appnet
|
|
||||||
depends_on:
|
|
||||||
- drone-server
|
|
||||||
ngrok:
|
|
||||||
deploy:
|
|
||||||
placement:
|
|
||||||
constraints: [node.labels.com.sigyl.git-stack == yes]
|
|
||||||
replicas: 1
|
|
||||||
restart_policy:
|
|
||||||
condition: any
|
|
||||||
image: ${LOCAL_DOCKER_REGISTRY}/ngrok-gitea
|
|
||||||
ports:
|
|
||||||
- "4040:4040"
|
|
||||||
volumes:
|
|
||||||
- ./ngrok-gitea/ngrok.m._yml:/home/ngrok/.ngrok2/ngrok._yml:ro
|
|
||||||
environment:
|
|
||||||
- GIT_DOMAIN=${GIT_DOMAIN}
|
|
||||||
- DRONE_DOMAIN=${DRONE_DOMAIN}
|
|
||||||
- REMOTE_DOMAIN=${REMOTE_DOMAIN}
|
|
||||||
- BLOG_DOMAIN=${BLOG_DOMAIN}
|
|
||||||
depends_on:
|
|
||||||
- gitea
|
|
||||||
networks:
|
|
||||||
- appnet
|
|
||||||
secrets:
|
|
||||||
- ngrok-auth-token
|
|
||||||
drone-server:
|
|
||||||
deploy:
|
|
||||||
placement:
|
|
||||||
constraints: [node.labels.com.sigyl.git-stack == yes]
|
|
||||||
replicas: 1
|
|
||||||
restart_policy:
|
|
||||||
condition: any
|
|
||||||
image: drone/drone:latest
|
|
||||||
volumes:
|
|
||||||
- drone:/var/lib/drone
|
|
||||||
- drone-data:/data
|
|
||||||
depends_on:
|
|
||||||
- gitea
|
|
||||||
environment:
|
|
||||||
- DRONE_LOGS_DEBUG=true
|
|
||||||
- DRONE_LOGS_PRETTY=true
|
|
||||||
- DRONE_GITEA_SERVER=https://${GIT_DOMAIN}
|
|
||||||
- DRONE_GITEA_CLIENT_ID=${DRONE_GITEA_CLIENT_ID}
|
|
||||||
- DRONE_GITEA_CLIENT_SECRET=${DRONE_GITEA_CLIENT_SECRET}
|
|
||||||
- DRONE_SERVER_HOST=${DRONE_DOMAIN} # tunnel hostname
|
|
||||||
- DRONE_ADMIN=giles
|
|
||||||
- DRONE_SERVER_PROTO=https # tunnel adds https on top
|
|
||||||
- DRONE_SERVER_PORT=:8080
|
|
||||||
- DRONE_RPC_SECRET=${DRONE_RPC_SECRET}
|
|
||||||
- DRONE_USER_CREATE=username:giles,admin:true
|
|
||||||
- DRONE_AGENTS_ENABLED=true
|
|
||||||
#- DRONE_ENV_PLUGIN_ENDPOINT=http://git.local-domain:8888
|
|
||||||
#- DRONE_ENV_PLUGIN_TOKEN=anything
|
|
||||||
networks:
|
|
||||||
- appnet
|
|
||||||
drone-docker-runner:
|
|
||||||
deploy:
|
|
||||||
placement:
|
|
||||||
constraints: [node.labels.com.sigyl.git-stack == yes]
|
|
||||||
replicas: 1
|
|
||||||
restart_policy:
|
|
||||||
condition: any
|
|
||||||
image: drone/drone-runner-docker:1
|
|
||||||
depends_on:
|
|
||||||
- drone-server
|
|
||||||
volumes:
|
|
||||||
- /var/run/docker.sock:/var/run/docker.sock
|
|
||||||
environment:
|
|
||||||
- DRONE_RPC_PROTO=https
|
|
||||||
- DRONE_RPC_HOST=${DRONE_DOMAIN}
|
|
||||||
- DRONE_RPC_SECRET=${DRONE_RPC_SECRET}
|
|
||||||
- DRONE_RUNNER_CAPACITY=8
|
|
||||||
- DRONE_RUNNER_NAME="docker-runner"
|
|
||||||
#- DRONE_ENV_PLUGIN_ENDPOINT=http://git.local-domain:8888
|
|
||||||
#- DRONE_ENV_PLUGIN_TOKEN=anything
|
|
||||||
|
|
||||||
registry:
|
|
||||||
deploy:
|
|
||||||
placement:
|
|
||||||
constraints: [node.labels.com.sigyl.git-stack == yes]
|
|
||||||
replicas: 1
|
|
||||||
restart_policy:
|
|
||||||
condition: any
|
|
||||||
image: registry:2
|
|
||||||
ports:
|
|
||||||
- 5000:5000
|
|
||||||
volumes:
|
|
||||||
- registry-data:/var/lib/registry
|
|
||||||
environment:
|
|
||||||
- REGISTRY_HTTP_ADDR=0.0.0.0:5000
|
|
||||||
- REGISTRY_HTTP_TLS_CERTIFICATE="/run/secrets/registry-cert"
|
|
||||||
- REGISTRY_HTTP_TLS_KEY="/run/secrets/registry-key"
|
|
||||||
networks:
|
|
||||||
- appnet
|
|
||||||
secrets:
|
|
||||||
- registry-cert
|
|
||||||
- registry-key
|
|
||||||
registry-cache:
|
|
||||||
deploy:
|
|
||||||
placement:
|
|
||||||
constraints: [node.labels.com.sigyl.git-stack == yes]
|
|
||||||
replicas: 1
|
|
||||||
restart_policy:
|
|
||||||
condition: any
|
|
||||||
image: registry:2
|
|
||||||
ports:
|
|
||||||
- 5001:5001
|
|
||||||
volumes:
|
|
||||||
- registry-cache-data:/var/lib/registry
|
|
||||||
environment:
|
|
||||||
- REGISTRY_HTTP_ADDR=0.0.0.0:5001
|
|
||||||
- REGISTRY_HTTP_TLS_CERTIFICATE="/run/secrets/registry-cert"
|
|
||||||
- REGISTRY_HTTP_TLS_KEY="/run/secrets/registry-key"
|
|
||||||
- REGISTRY_PROXY_REMOTEURL=http://registry-1.docker.io
|
|
||||||
networks:
|
|
||||||
- appnet
|
|
||||||
secrets:
|
|
||||||
- registry-cert
|
|
||||||
- registry-key
|
|
||||||
guacamole-postgresql:
|
|
||||||
deploy:
|
|
||||||
placement:
|
|
||||||
constraints: [node.labels.com.sigyl.git-stack == yes]
|
|
||||||
replicas: 1
|
|
||||||
restart_policy:
|
|
||||||
condition: any
|
|
||||||
image: ${LOCAL_DOCKER_REGISTRY}/guacamole-postgresql:latest
|
|
||||||
environment:
|
|
||||||
POSTGRES_PASSWORD: guacroot
|
|
||||||
POSTGRES_DB: guacamole_db
|
|
||||||
volumes:
|
|
||||||
- guacamole-postgresql-data:/var/lib/postgresql/data
|
|
||||||
#secrets:
|
|
||||||
# - source: guacamole-postgresql-password
|
|
||||||
# target: password
|
|
||||||
|
|
||||||
#- /home/giles/guacamole-stack/initdb.sql:/initdb.sql
|
|
||||||
networks:
|
|
||||||
- appnet
|
|
||||||
|
|
||||||
# The backend guacamole server.
|
|
||||||
guacd:
|
|
||||||
deploy:
|
|
||||||
placement:
|
|
||||||
constraints: [node.labels.com.sigyl.git-stack == yes]
|
|
||||||
replicas: 1
|
|
||||||
restart_policy:
|
|
||||||
condition: any
|
|
||||||
image: guacamole/guacd:latest
|
|
||||||
networks:
|
|
||||||
- appnet
|
|
||||||
|
|
||||||
guacamole:
|
|
||||||
deploy:
|
|
||||||
placement:
|
|
||||||
constraints: [node.labels.com.sigyl.git-stack == yes]
|
|
||||||
replicas: 1
|
|
||||||
restart_policy:
|
|
||||||
condition: any
|
|
||||||
image: guacamole/guacamole:latest
|
|
||||||
secrets:
|
|
||||||
- source: guacamole-postgresql-database
|
|
||||||
target: database
|
|
||||||
- source: guacamole-postgresql-user
|
|
||||||
target: user
|
|
||||||
- source: guacamole-postgresql-password
|
|
||||||
target: password
|
|
||||||
environment:
|
|
||||||
- POSTGRES_HOSTNAME=guacamole-postgresql
|
|
||||||
- POSTGRES_PORT=5432
|
|
||||||
- POSTGRES_USER_FILE=/run/secrets/user
|
|
||||||
- POSTGRES_PASSWORD_FILE=/run/secrets/password
|
|
||||||
- POSTGRES_DATABASE_FILE=/run/secrets/database
|
|
||||||
- GUACD_HOSTNAME=guacd
|
|
||||||
networks:
|
|
||||||
- appnet
|
|
||||||
volumes:
|
|
||||||
drone:
|
|
||||||
drone-data:
|
|
||||||
registry-data:
|
|
||||||
registry-cache-data:
|
|
||||||
guacamole-postgresql-data:
|
|
||||||
letsencrypt-remote:
|
|
||||||
letsencrypt-drone:
|
|
||||||
|
|
||||||
networks:
|
|
||||||
appnet:
|
|
||||||
driver: overlay
|
|
||||||
#external: true
|
|
||||||
secrets:
|
|
||||||
'registry-cert':
|
|
||||||
file: .certificates/registry.crt
|
|
||||||
'registry-key':
|
|
||||||
file: .certificates/registry.key
|
|
||||||
'guacamole-postgresql-database':
|
|
||||||
file: .secrets/guacamole-postgresql-database
|
|
||||||
'guacamole-postgresql-user':
|
|
||||||
file: .secrets/guacamole-postgresql-user
|
|
||||||
'guacamole-postgresql-password':
|
|
||||||
file: .secrets/guacamole-postgresql-password
|
|
||||||
'ngrok-auth-token':
|
|
||||||
file: .secrets/ngrok-auth-token
|
|
||||||
|
|
@ -1,254 +0,0 @@
|
||||||
version: "3.7"
|
|
||||||
services:
|
|
||||||
letsencrypt-remote:
|
|
||||||
deploy:
|
|
||||||
placement:
|
|
||||||
constraints: [node.labels.com.sigyl.git-stack == yes]
|
|
||||||
replicas: 1
|
|
||||||
restart_policy:
|
|
||||||
condition: any
|
|
||||||
image: ${LOCAL_DOCKER_REGISTRY}letsencrypt-remote
|
|
||||||
environment:
|
|
||||||
- SERVER_NAME=${REMOTE_DOMAIN}
|
|
||||||
- CERTBOT_EMAIL=${CERTBOT_EMAIL}
|
|
||||||
- PROXY_PASS=http://guacamole:8080/guacamole/
|
|
||||||
volumes:
|
|
||||||
- letsencrypt-remote:/etc/letsencrypt
|
|
||||||
networks:
|
|
||||||
- appnet
|
|
||||||
depends_on:
|
|
||||||
- guacamole
|
|
||||||
letsencrypt-drone:
|
|
||||||
deploy:
|
|
||||||
placement:
|
|
||||||
constraints: [node.labels.com.sigyl.git-stack == yes]
|
|
||||||
replicas: 1
|
|
||||||
restart_policy:
|
|
||||||
condition: any
|
|
||||||
image: ${LOCAL_DOCKER_REGISTRY}letsencrypt-drone
|
|
||||||
environment:
|
|
||||||
- CERTBOT_EMAIL=${CERTBOT_EMAIL}
|
|
||||||
- SERVER_NAME=${DRONE_DOMAIN}
|
|
||||||
- PROXY_PASS=http://drone-server:8080/
|
|
||||||
volumes:
|
|
||||||
- letsencrypt-drone:/etc/letsencrypt
|
|
||||||
networks:
|
|
||||||
- appnet
|
|
||||||
depends_on:
|
|
||||||
- drone-server
|
|
||||||
ngrok:
|
|
||||||
deploy:
|
|
||||||
placement:
|
|
||||||
constraints: [node.labels.com.sigyl.git-stack == yes]
|
|
||||||
replicas: 1
|
|
||||||
restart_policy:
|
|
||||||
condition: any
|
|
||||||
image: ${LOCAL_DOCKER_REGISTRY}ngrok-gitea
|
|
||||||
ports:
|
|
||||||
- "4040:4040"
|
|
||||||
volumes:
|
|
||||||
- ./ngrok-gitea/ngrok.m._yml:/home/ngrok/.ngrok2/ngrok._yml:ro
|
|
||||||
environment:
|
|
||||||
- GIT_DOMAIN=${GIT_DOMAIN}
|
|
||||||
- DRONE_DOMAIN=${DRONE_DOMAIN}
|
|
||||||
- REMOTE_DOMAIN=${REMOTE_DOMAIN}
|
|
||||||
- BLOG_DOMAIN=${BLOG_DOMAIN}
|
|
||||||
depends_on:
|
|
||||||
- gitea
|
|
||||||
networks:
|
|
||||||
- appnet
|
|
||||||
secrets:
|
|
||||||
- ngrok-auth-token
|
|
||||||
drone-server:
|
|
||||||
deploy:
|
|
||||||
placement:
|
|
||||||
constraints: [node.labels.com.sigyl.git-stack == yes]
|
|
||||||
replicas: 1
|
|
||||||
restart_policy:
|
|
||||||
condition: any
|
|
||||||
image: drone/drone:latest
|
|
||||||
volumes:
|
|
||||||
- drone:/var/lib/drone
|
|
||||||
- drone-data:/data
|
|
||||||
depends_on:
|
|
||||||
- gitea
|
|
||||||
environment:
|
|
||||||
- DRONE_LOGS_DEBUG=true
|
|
||||||
- DRONE_LOGS_PRETTY=true
|
|
||||||
- DRONE_GITEA_SERVER=https://${GIT_DOMAIN}
|
|
||||||
- DRONE_GITEA_CLIENT_ID=${DRONE_GITEA_CLIENT_ID}
|
|
||||||
- DRONE_GITEA_CLIENT_SECRET=${DRONE_GITEA_CLIENT_SECRET}
|
|
||||||
- DRONE_SERVER_HOST=${DRONE_DOMAIN} # tunnel hostname
|
|
||||||
- DRONE_ADMIN=giles
|
|
||||||
- DRONE_SERVER_PROTO=https # tunnel adds https on top
|
|
||||||
- DRONE_SERVER_PORT=:8080
|
|
||||||
- DRONE_RPC_SECRET=${DRONE_RPC_SECRET}
|
|
||||||
- DRONE_USER_CREATE=username:giles,admin:true
|
|
||||||
- DRONE_AGENTS_ENABLED=true
|
|
||||||
- DRONE_CONVERT_PLUGIN_ENDPOINT=http://drone-starlark:3000
|
|
||||||
- DRONE_CONVERT_PLUGIN_SECRET=${DRONE_CONVERT_SECRET}
|
|
||||||
#- DRONE_ENV_PLUGIN_ENDPOINT=http://git.local-domain:8888
|
|
||||||
#- DRONE_ENV_PLUGIN_TOKEN=anything
|
|
||||||
networks:
|
|
||||||
- appnet
|
|
||||||
drone-docker-runner:
|
|
||||||
deploy:
|
|
||||||
placement:
|
|
||||||
constraints: [node.labels.com.sigyl.git-stack == yes]
|
|
||||||
replicas: 1
|
|
||||||
restart_policy:
|
|
||||||
condition: any
|
|
||||||
image: drone/drone-runner-docker:1
|
|
||||||
depends_on:
|
|
||||||
- drone-server
|
|
||||||
volumes:
|
|
||||||
- /var/run/docker.sock:/var/run/docker.sock
|
|
||||||
environment:
|
|
||||||
- DRONE_RPC_PROTO=https
|
|
||||||
- DRONE_RPC_HOST=${DRONE_DOMAIN}
|
|
||||||
- DRONE_RPC_SECRET=${DRONE_RPC_SECRET}
|
|
||||||
- DRONE_RUNNER_CAPACITY=8
|
|
||||||
- DRONE_RUNNER_NAME="docker-runner"
|
|
||||||
#- DRONE_ENV_PLUGIN_ENDPOINT=http://git.local-domain:8888
|
|
||||||
#- DRONE_ENV_PLUGIN_TOKEN=anything
|
|
||||||
drone-starlark:
|
|
||||||
deploy:
|
|
||||||
placement:
|
|
||||||
constraints: [node.labels.com.sigyl.git-stack == yes]
|
|
||||||
replicas: 1
|
|
||||||
restart_policy:
|
|
||||||
condition: any
|
|
||||||
image: ${LOCAL_DOCKER_REGISTRY}drone-starlark
|
|
||||||
environment:
|
|
||||||
- DRONE_DEBUG=true
|
|
||||||
- DRONE_SECRET=${DRONE_CONVERT_SECRET}
|
|
||||||
- DRONE_STARLARK_REPO_PATHS=this:/repos
|
|
||||||
networks:
|
|
||||||
- appnet
|
|
||||||
|
|
||||||
registry:
|
|
||||||
deploy:
|
|
||||||
placement:
|
|
||||||
constraints: [node.labels.com.sigyl.git-stack == yes]
|
|
||||||
replicas: 1
|
|
||||||
restart_policy:
|
|
||||||
condition: any
|
|
||||||
image: registry:2
|
|
||||||
ports:
|
|
||||||
- 5000:5000
|
|
||||||
volumes:
|
|
||||||
- registry-data:/var/lib/registry
|
|
||||||
environment:
|
|
||||||
- REGISTRY_HTTP_ADDR=0.0.0.0:5000
|
|
||||||
- REGISTRY_HTTP_TLS_CERTIFICATE="/run/secrets/registry-cert"
|
|
||||||
- REGISTRY_HTTP_TLS_KEY="/run/secrets/registry-key"
|
|
||||||
networks:
|
|
||||||
- appnet
|
|
||||||
secrets:
|
|
||||||
- registry-cert
|
|
||||||
- registry-key
|
|
||||||
registry-cache:
|
|
||||||
deploy:
|
|
||||||
placement:
|
|
||||||
constraints: [node.labels.com.sigyl.git-stack == yes]
|
|
||||||
replicas: 1
|
|
||||||
restart_policy:
|
|
||||||
condition: any
|
|
||||||
image: registry:2
|
|
||||||
ports:
|
|
||||||
- 5001:5001
|
|
||||||
volumes:
|
|
||||||
- registry-cache-data:/var/lib/registry
|
|
||||||
environment:
|
|
||||||
- REGISTRY_HTTP_ADDR=0.0.0.0:5001
|
|
||||||
- REGISTRY_HTTP_TLS_CERTIFICATE="/run/secrets/registry-cert"
|
|
||||||
- REGISTRY_HTTP_TLS_KEY="/run/secrets/registry-key"
|
|
||||||
- REGISTRY_PROXY_REMOTEURL=http://registry-1.docker.io
|
|
||||||
networks:
|
|
||||||
- appnet
|
|
||||||
secrets:
|
|
||||||
- registry-cert
|
|
||||||
- registry-key
|
|
||||||
guacamole-postgresql:
|
|
||||||
deploy:
|
|
||||||
placement:
|
|
||||||
constraints: [node.labels.com.sigyl.git-stack == yes]
|
|
||||||
replicas: 1
|
|
||||||
restart_policy:
|
|
||||||
condition: any
|
|
||||||
image: ${LOCAL_DOCKER_REGISTRY}guacamole-postgresql:latest
|
|
||||||
environment:
|
|
||||||
POSTGRES_PASSWORD: ${GUACAMOLE_POSTGRES_PASSWORD}
|
|
||||||
POSTGRES_DB: ${GUACAMOLE_POSTGRES_DB}
|
|
||||||
volumes:
|
|
||||||
- guacamole-postgresql-data:/var/lib/postgresql/data
|
|
||||||
#secrets:
|
|
||||||
# - source: guacamole-postgresql-password
|
|
||||||
# target: password
|
|
||||||
|
|
||||||
#- /home/giles/guacamole-stack/initdb.sql:/initdb.sql
|
|
||||||
networks:
|
|
||||||
- appnet
|
|
||||||
|
|
||||||
# The backend guacamole server.
|
|
||||||
guacd:
|
|
||||||
deploy:
|
|
||||||
placement:
|
|
||||||
constraints: [node.labels.com.sigyl.git-stack == yes]
|
|
||||||
replicas: 1
|
|
||||||
restart_policy:
|
|
||||||
condition: any
|
|
||||||
image: guacamole/guacd:latest
|
|
||||||
networks:
|
|
||||||
- appnet
|
|
||||||
|
|
||||||
guacamole:
|
|
||||||
deploy:
|
|
||||||
placement:
|
|
||||||
constraints: [node.labels.com.sigyl.git-stack == yes]
|
|
||||||
replicas: 1
|
|
||||||
restart_policy:
|
|
||||||
condition: any
|
|
||||||
image: guacamole/guacamole:latest
|
|
||||||
secrets:
|
|
||||||
- source: guacamole-postgresql-database
|
|
||||||
target: database
|
|
||||||
- source: guacamole-postgresql-user
|
|
||||||
target: user
|
|
||||||
- source: guacamole-postgresql-password
|
|
||||||
target: password
|
|
||||||
environment:
|
|
||||||
- POSTGRES_HOSTNAME=guacamole-postgresql
|
|
||||||
- POSTGRES_PORT=5432
|
|
||||||
- POSTGRES_USER=${GUACAMOLE_POSTGRES_USER}
|
|
||||||
- POSTGRES_PASSWORD=${GUACAMOLE_POSTGRES_PASSWORD}
|
|
||||||
- POSTGRES_DATABASE=${GUACAMOLE_POSTGRES_DB}
|
|
||||||
- GUACD_HOSTNAME=guacd
|
|
||||||
networks:
|
|
||||||
- appnet
|
|
||||||
volumes:
|
|
||||||
drone:
|
|
||||||
drone-data:
|
|
||||||
registry-data:
|
|
||||||
registry-cache-data:
|
|
||||||
guacamole-postgresql-data:
|
|
||||||
letsencrypt-remote:
|
|
||||||
letsencrypt-drone:
|
|
||||||
|
|
||||||
networks:
|
|
||||||
appnet:
|
|
||||||
driver: overlay
|
|
||||||
#external: true
|
|
||||||
secrets:
|
|
||||||
'registry-cert':
|
|
||||||
file: .certificates/registry.crt
|
|
||||||
'registry-key':
|
|
||||||
file: .certificates/registry.key
|
|
||||||
'guacamole-postgresql-database':
|
|
||||||
file: .secrets/guacamole-postgresql-database
|
|
||||||
'guacamole-postgresql-user':
|
|
||||||
file: .secrets/guacamole-postgresql-user
|
|
||||||
'guacamole-postgresql-password':
|
|
||||||
file: .secrets/guacamole-postgresql-password
|
|
||||||
'ngrok-auth-token':
|
|
||||||
file: .secrets/ngrok-auth-token
|
|
||||||
|
|
@ -70,7 +70,7 @@ def drone(
|
||||||
],
|
],
|
||||||
),
|
),
|
||||||
deploy(
|
deploy(
|
||||||
"docker-compose-home.yml",
|
"docker-compose.yml",
|
||||||
name,
|
name,
|
||||||
base,
|
base,
|
||||||
publicSecrets + secretSecrets,
|
publicSecrets + secretSecrets,
|
||||||
|
|
|
||||||
Reference in New Issue