130 lines
4.4 KiB
YAML
130 lines
4.4 KiB
YAML
# https://github.com/ChristianLempa/videos/blob/main/ansiblesemaphore-tutorial/docker-compose.yaml
|
|
services:
|
|
postgres:
|
|
container_name: ansible-postgres
|
|
restart: unless-stopped
|
|
image: postgres:14 # postgres:17.5-alpine
|
|
hostname: postgres
|
|
volumes:
|
|
- semaphore-postgres:/var/lib/postgresql/data
|
|
environment:
|
|
POSTGRES_USER: semaphore
|
|
POSTGRES_PASSWORD: semaphore
|
|
POSTGRES_DB: semaphore
|
|
networks:
|
|
- ansible
|
|
|
|
pgadmin:
|
|
container_name: ansible-pgadmin
|
|
image: dpage/pgadmin4:7.6
|
|
restart: unless-stopped
|
|
environment:
|
|
PGADMIN_DEFAULT_EMAIL: y.m.lima19@gmail.com
|
|
PGADMIN_DEFAULT_PASSWORD: semaphore
|
|
PGADMIN_CONFIG_SERVER_MODE: 'False'
|
|
depends_on:
|
|
- postgres
|
|
networks:
|
|
- ansible
|
|
volumes:
|
|
- pgadmin-data:/var/lib/pgadmin
|
|
|
|
semaphore:
|
|
container_name: ansible-semaphore
|
|
build:
|
|
context: . # Directory containing the Dockerfile
|
|
dockerfile: Dockerfile.semaphore # Name of the Dockerfile
|
|
restart: always
|
|
# user: "${UID}:${GID}"
|
|
# Use root is not the best approach, we need soon create a user and group to run this container.
|
|
user: "root" # change to your user id and group id, this is to avoid permission issues
|
|
# image: semaphoreui/semaphore:v2.9.75 # v2.9.28
|
|
environment:
|
|
TZ: Europe/Berlin
|
|
SEMAPHORE_SCHEDULE_TIMEZONE: Europe/Berlin
|
|
SEMAPHORE_DB_USER: semaphore
|
|
SEMAPHORE_DB_PASS: semaphore
|
|
SEMAPHORE_DB_HOST: postgres
|
|
SEMAPHORE_DB_PORT: 5432
|
|
SEMAPHORE_DB_DIALECT: postgres
|
|
SEMAPHORE_DB: semaphore
|
|
SEMAPHORE_PLAYBOOK_PATH: /tmp/semaphore/
|
|
SEMAPHORE_ADMIN_PASSWORD: 12345678
|
|
SEMAPHORE_ADMIN_NAME: admin
|
|
SEMAPHORE_ADMIN_EMAIL: y.m.lima19@gmail.com
|
|
SEMAPHORE_ADMIN: admin #OLD from access_key_encryption in config file => eMsZ2Zk3C/1DORYCLRwS/pO/NKsthZhuckTRRxIn+PM=
|
|
SEMAPHORE_ACCESS_KEY_ENCRYPTION: BvmQlUSZ9BoUK7x2U7LoyKh7uyxLNeaPwvryzhjs2pY= # DONT CHANGE UNLESS YOU KNOW WHAT YOU ARE DOING!!!!!!!!!!
|
|
ANSIBLE_HOST_KEY_CHECKING: false # (optional) change to true if you want to enable host key checking, fingerprint will be saved in /etc/semaphore/known_hosts
|
|
# ANSIBLE_USER: ansible
|
|
#ssh_args -o
|
|
# ANSIBLE_SSH_ARGS: '-o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null'
|
|
# ForwardAgent
|
|
# ANSIBLE_SSH_ARGS: '-o ForwardAgent=yes'
|
|
# scp_if_ssh
|
|
# ANSIBLE_SCP_IF_SSH: 'True'
|
|
# SEMAPHORE_LDAP_ACTIVATED: 'no' # if you wish to use ldap, set to: 'yes'
|
|
# SEMAPHORE_LDAP_HOST: dc01.local.example.com
|
|
# SEMAPHORE_LDAP_PORT: '636'
|
|
# SEMAPHORE_LDAP_NEEDTLS: 'yes'
|
|
# SEMAPHORE_LDAP_DN_BIND: 'uid=bind_user,cn=users,cn=accounts,dc=local,dc=shiftsystems,dc=net'
|
|
# SEMAPHORE_LDAP_PASSWORD: 'ldap_bind_account_password'
|
|
# SEMAPHORE_LDAP_DN_SEARCH: 'dc=local,dc=example,dc=com'
|
|
# SEMAPHORE_LDAP_SEARCH_FILTER: "(&(uid=%s)(memberOf=cn=ipausers,cn=groups,cn=accounts,dc=local,dc=example,dc=com))"
|
|
volumes:
|
|
- ./semaphore-config/config/:/etc/semaphore:rw # This is working fine!!!
|
|
depends_on:
|
|
- postgres
|
|
networks:
|
|
- ansible
|
|
|
|
node_exporter:
|
|
image: quay.io/prometheus/node-exporter:latest
|
|
container_name: node_exporter
|
|
network_mode: host
|
|
pid: host
|
|
restart: unless-stopped
|
|
command:
|
|
- "--path.procfs=/host/proc"
|
|
- "--path.sysfs=/host/sys"
|
|
- "--path.rootfs=/host"
|
|
- "--collector.filesystem.ignored-mount-points=^/(sys|proc|dev)($$|/)"
|
|
volumes:
|
|
- "/proc:/host/proc:ro"
|
|
- "/sys:/host/sys:ro"
|
|
- "/:/host:ro,rslave"
|
|
|
|
https_portal:
|
|
container_name: https_portal
|
|
image: "steveltn/https-portal:1.21"
|
|
restart: unless-stopped
|
|
user: "root"
|
|
networks:
|
|
- ansible # internal network
|
|
ports:
|
|
- "80:80"
|
|
- "443:443"
|
|
environment:
|
|
STAGE: "production" # Use Let's Encrypt production server
|
|
WEBSOCKET: "true" # Enable websocket support
|
|
DEBUG: "true"
|
|
RENEW_MARGIN_DAYS: 30
|
|
CLIENT_MAX_BODY_SIZE: 0
|
|
# FORCE_RENEW: 'true'
|
|
DOMAINS: >
|
|
ansible.phx-erp.de -> semaphore:3000, pgadmin-ansible.phx-erp.de -> pgadmin:80
|
|
volumes:
|
|
- ./https_portal/data:/var/lib/https-portal # ssl_certs, vhost.d, htdocs
|
|
- ./https_portal/log:/var/log/nginx # nginx logs
|
|
depends_on:
|
|
- semaphore
|
|
- pgadmin
|
|
|
|
volumes:
|
|
semaphore-postgres:
|
|
pgadmin-data:
|
|
|
|
networks:
|
|
ansible:
|
|
name: ansible
|
|
driver: bridge
|