gitea migration
This commit is contained in:
@@ -1,43 +0,0 @@
|
||||
networks:
|
||||
gitea:
|
||||
external: false
|
||||
|
||||
services:
|
||||
server:
|
||||
image: docker.gitea.com/gitea:1.26.0
|
||||
container_name: gitea
|
||||
environment:
|
||||
- USER_UID=1000
|
||||
- USER_GID=1000
|
||||
- GITEA__database__DB_TYPE=postgres
|
||||
- GITEA__database__HOST=db:5432
|
||||
- GITEA__database__NAME=gitea
|
||||
- GITEA__database__USER=gitea
|
||||
- GITEA__database__PASSWD={{ gitea_db_password }}
|
||||
- GITEA__server__SSH_LISTEN_PORT=2222
|
||||
- GITEA__server__SSH_PORT=2222
|
||||
- SSH_LISTEN_PORT=2222
|
||||
restart: always
|
||||
networks:
|
||||
- gitea
|
||||
volumes:
|
||||
- ./gitea:/data
|
||||
- /etc/timezone:/etc/timezone:ro
|
||||
- /etc/localtime:/etc/localtime:ro
|
||||
ports:
|
||||
- "3000:3000"
|
||||
- "2222:2222"
|
||||
depends_on:
|
||||
- db
|
||||
|
||||
db:
|
||||
image: docker.io/library/postgres:14
|
||||
restart: always
|
||||
environment:
|
||||
- POSTGRES_USER=gitea
|
||||
- POSTGRES_PASSWORD={{ gitea_db_password }}
|
||||
- POSTGRES_DB=gitea
|
||||
networks:
|
||||
- gitea
|
||||
volumes:
|
||||
- ./postgres:/var/lib/postgresql/data
|
||||
@@ -0,0 +1,17 @@
|
||||
[Unit]
|
||||
Description=Gitea Postgres
|
||||
|
||||
[Container]
|
||||
ContainerName=gitea-db
|
||||
Image=docker.io/library/postgres:14
|
||||
Network=gitea.network
|
||||
Volume=/home/gitea/data/postgres:/var/lib/postgresql/data
|
||||
Environment=POSTGRES_USER=gitea
|
||||
Environment=POSTGRES_PASSWORD={{ gitea_db_password }}
|
||||
Environment=POSTGRES_DB=gitea
|
||||
|
||||
[Service]
|
||||
Restart=on-failure
|
||||
|
||||
[Install]
|
||||
WantedBy=default.target
|
||||
@@ -0,0 +1,30 @@
|
||||
[Unit]
|
||||
Description=Gitea Server
|
||||
Requires=gitea-db.service
|
||||
After=gitea-db.service
|
||||
|
||||
[Container]
|
||||
ContainerName=gitea-server
|
||||
Image=docker.gitea.com/gitea:1.26.0
|
||||
Network=gitea.network
|
||||
PublishPort=3000:3000
|
||||
PublishPort=2222:2222
|
||||
Volume=/home/gitea/data/gitea:/data
|
||||
Volume=/etc/timezone:/etc/timezone:ro
|
||||
Volume=/etc/localtime:/etc/localtime:ro
|
||||
Environment=USER_UID=1000
|
||||
Environment=USER_GID=1000
|
||||
Environment=GITEA__database__DB_TYPE=postgres
|
||||
Environment=GITEA__database__HOST=gitea-db:5432
|
||||
Environment=GITEA__database__NAME=gitea
|
||||
Environment=GITEA__database__USER=gitea
|
||||
Environment=GITEA__database__PASSWD={{ gitea_db_password }}
|
||||
Environment=GITEA__server__SSH_LISTEN_PORT=2222
|
||||
Environment=GITEA__server__SSH_PORT=2222
|
||||
Environment=SSH_LISTEN_PORT=2222
|
||||
|
||||
[Service]
|
||||
Restart=on-failure
|
||||
|
||||
[Install]
|
||||
WantedBy=default.target
|
||||
+87
-23
@@ -2,6 +2,8 @@
|
||||
hosts: beepi
|
||||
become: true
|
||||
vars:
|
||||
user: gitea
|
||||
user_home: /home/gitea
|
||||
gitea_db_password: !vault |
|
||||
$ANSIBLE_VAULT;1.1;AES256
|
||||
63336533393735346165633965383866393736336365646330346236356239363737353234383637
|
||||
@@ -10,37 +12,99 @@
|
||||
3736353865313938300a383266353538666135353866653263663133663232646430323966353134
|
||||
3939
|
||||
tasks:
|
||||
- name: Install podman
|
||||
- name: Install dependencies
|
||||
ansible.builtin.apt:
|
||||
name: podman
|
||||
name: "{{ item }}"
|
||||
state: present
|
||||
loop:
|
||||
- podman
|
||||
- systemd-container
|
||||
- passt
|
||||
|
||||
- name: Install podman-compose
|
||||
ansible.builtin.apt:
|
||||
name: podman-compose
|
||||
state: present
|
||||
- name: Create user
|
||||
ansible.builtin.user:
|
||||
name: "{{ user }}"
|
||||
home: "{{ user_home }}"
|
||||
shell: /usr/sbin/nologin
|
||||
create_home: true
|
||||
register: user_info
|
||||
|
||||
- name: Create gitea directory
|
||||
- name: Enable linger
|
||||
ansible.builtin.command:
|
||||
cmd: "loginctl enable-linger {{ user }}"
|
||||
creates: "/var/lib/systemd/linger/{{ user }}"
|
||||
|
||||
- name: Create quadlet directory
|
||||
ansible.builtin.file:
|
||||
path: /opt/beeserver/gitea
|
||||
path: "{{ user_home }}/.config/containers/systemd"
|
||||
state: directory
|
||||
owner: "{{ user }}"
|
||||
group: "{{ user }}"
|
||||
mode: '0755'
|
||||
|
||||
- name: Compose down
|
||||
changed_when: true
|
||||
failed_when: false
|
||||
ansible.builtin.command:
|
||||
cmd: podman-compose down
|
||||
chdir: /opt/beeserver/gitea
|
||||
- name: Create data directory
|
||||
ansible.builtin.file:
|
||||
path: "{{ user_home }}/data"
|
||||
state: directory
|
||||
owner: "{{ user }}"
|
||||
group: "{{ user }}"
|
||||
mode: '0755'
|
||||
|
||||
- name: Copy compose
|
||||
ansible.builtin.template:
|
||||
src: docker-compose.yml.j2
|
||||
dest: /opt/beeserver/gitea/docker-compose.yml
|
||||
- name: Copy network
|
||||
ansible.builtin.copy:
|
||||
dest: "{{ user_home }}/.config/containers/systemd/gitea.network"
|
||||
content: "[Network]\n"
|
||||
owner: "{{ user }}"
|
||||
group: "{{ user }}"
|
||||
mode: '0644'
|
||||
|
||||
- name: Compose up
|
||||
changed_when: true
|
||||
ansible.builtin.command:
|
||||
cmd: podman-compose up -d
|
||||
chdir: /opt/beeserver/gitea
|
||||
- name: Deploy db quadlet
|
||||
ansible.builtin.template:
|
||||
src: gitea-db.container.j2
|
||||
dest: "{{ user_home }}/.config/containers/systemd/gitea-db.container"
|
||||
owner: "{{ user }}"
|
||||
group: "{{ user }}"
|
||||
mode: '0600'
|
||||
|
||||
- name: Deploy server quadlet
|
||||
ansible.builtin.template:
|
||||
src: gitea-server.container.j2
|
||||
dest: "{{ user_home }}/.config/containers/systemd/gitea-server.container"
|
||||
owner: "{{ user }}"
|
||||
group: "{{ user }}"
|
||||
mode: '0600'
|
||||
|
||||
- name: Reload user systemd
|
||||
become: true
|
||||
become_user: "{{ user }}"
|
||||
environment:
|
||||
XDG_RUNTIME_DIR: "/run/user/{{ user_info.uid }}"
|
||||
DBUS_SESSION_BUS_ADDRESS: "unix:path=/run/user/{{ user_info.uid }}/bus"
|
||||
ansible.builtin.systemd:
|
||||
daemon_reload: true
|
||||
scope: user
|
||||
|
||||
- name: Start user manager
|
||||
ansible.builtin.systemd:
|
||||
name: "user@{{ user_info.uid }}.service"
|
||||
state: started
|
||||
|
||||
- name: Start gitea-server
|
||||
become: true
|
||||
become_user: "{{ user }}"
|
||||
environment:
|
||||
XDG_RUNTIME_DIR: "/run/user/{{ user_info.uid }}"
|
||||
DBUS_SESSION_BUS_ADDRESS: "unix:path=/run/user/{{ user_info.uid }}/bus"
|
||||
ansible.builtin.systemd:
|
||||
name: gitea-server.service
|
||||
state: started
|
||||
scope: user
|
||||
|
||||
- name: Debug
|
||||
ansible.builtin.debug:
|
||||
msg:
|
||||
- "Service status: systemctl --user --machine {{ user_info.name }}@.host status gitea-server"
|
||||
- "Read logs: sudo journalctl _UID={{ user_info.uid }} -n 200 --no-pager"
|
||||
- "Shell: machinectl shell {{ user_info.name }}@.host /bin/bash"
|
||||
tags:
|
||||
- always
|
||||
|
||||
Reference in New Issue
Block a user