2024-04-07 15:53:48 +01:00
|
|
|
# Copyright 2024 The Forgejo Authors.
|
2023-08-24 11:28:17 +01:00
|
|
|
# SPDX-License-Identifier: MIT
|
|
|
|
|
2023-09-04 17:19:15 +01:00
|
|
|
#
|
|
|
|
# Create a secret with:
|
|
|
|
#
|
|
|
|
# openssl rand -hex 20
|
|
|
|
#
|
|
|
|
# Replace all occurences of {SHARED_SECRET} below with the output.
|
2024-09-26 23:08:31 +01:00
|
|
|
#
|
2023-09-04 17:19:15 +01:00
|
|
|
# NOTE: a token obtained from the Forgejo web interface cannot be used
|
|
|
|
# as a shared secret.
|
|
|
|
#
|
2024-09-25 23:21:53 +01:00
|
|
|
# Replace ${RUNNER_TOKEN} with the token obtained from the Forgejo web interface.
|
2023-09-04 17:19:15 +01:00
|
|
|
#
|
|
|
|
|
2024-09-25 22:05:56 +01:00
|
|
|
networks:
|
|
|
|
forgejo:
|
|
|
|
|
2024-04-07 17:07:00 +01:00
|
|
|
volumes:
|
|
|
|
docker_certs:
|
2023-08-24 11:28:17 +01:00
|
|
|
|
|
|
|
services:
|
|
|
|
docker-in-docker:
|
2024-08-13 13:00:37 +01:00
|
|
|
image: code.forgejo.org/oci/docker:dind
|
2024-09-26 23:08:31 +01:00
|
|
|
# container_name: docker # Must set container_name to docker for both internal DNS and TLS to work
|
|
|
|
hostname: docker
|
2024-08-13 07:37:52 +01:00
|
|
|
privileged: true
|
2024-09-25 22:05:56 +01:00
|
|
|
networks:
|
|
|
|
- forgejo
|
2024-04-07 17:07:00 +01:00
|
|
|
environment:
|
2024-09-26 23:08:31 +01:00
|
|
|
DOCKER_TLS_CERTDIR: "/certs" # set to "" to disable the use of TLS, also manually update existing runner configs to use port 2375
|
2024-04-07 17:07:00 +01:00
|
|
|
volumes:
|
|
|
|
- docker_certs:/certs
|
2023-08-24 11:28:17 +01:00
|
|
|
|
|
|
|
forgejo:
|
2023-12-04 20:33:21 +00:00
|
|
|
image: codeberg.org/forgejo/forgejo:1.21
|
2024-09-26 23:08:31 +01:00
|
|
|
hostname: forgejo
|
2024-09-25 22:05:56 +01:00
|
|
|
networks:
|
|
|
|
- forgejo
|
2023-08-24 11:28:17 +01:00
|
|
|
volumes:
|
2024-09-25 22:05:56 +01:00
|
|
|
- ./forgejo:/data
|
2023-08-24 11:28:17 +01:00
|
|
|
ports:
|
|
|
|
- 8080:3000
|
2024-09-25 23:21:53 +01:00
|
|
|
command: >-
|
|
|
|
bash -c '
|
|
|
|
/bin/s6-svscan /etc/s6 &
|
|
|
|
sleep 10 ;
|
2024-09-26 23:08:31 +01:00
|
|
|
su -c "forgejo admin user create --admin --username root --password examplepassword --email root@example.com" git ;
|
2024-09-25 23:21:53 +01:00
|
|
|
su -c "forgejo forgejo-cli actions register --secret {SHARED_SECRET}" git ;
|
|
|
|
sleep infinity
|
|
|
|
'
|
2023-08-24 11:28:17 +01:00
|
|
|
|
2024-09-26 23:08:31 +01:00
|
|
|
# all values that have defaults listed are optional
|
|
|
|
# only FORGEJO_SECRET or RUNNER_TOKEN is required
|
|
|
|
# FORGEJO_URL is required if forgejo is in this compose file or docker network
|
2024-09-25 22:05:56 +01:00
|
|
|
forgejo-runner:
|
|
|
|
## TODO: Update image to the the release
|
|
|
|
## made from this PR: https://code.forgejo.org/forgejo/runner/pulls/283
|
2024-09-26 23:08:31 +01:00
|
|
|
|
|
|
|
# image: code.forgejo.org/forgejo/runner:3.4.1
|
|
|
|
build: ../../
|
|
|
|
# user: "1000" # set to run rootless, overrides RUNNER_USER and disables automatic file ownership
|
2023-08-24 11:28:17 +01:00
|
|
|
volumes:
|
2024-09-25 22:05:56 +01:00
|
|
|
- ./forgejo-runner:/data
|
|
|
|
- docker_certs:/certs
|
|
|
|
networks:
|
|
|
|
- forgejo
|
|
|
|
depends_on:
|
2023-08-24 11:28:17 +01:00
|
|
|
- docker-in-docker
|
|
|
|
- forgejo
|
|
|
|
environment:
|
2024-09-26 23:08:31 +01:00
|
|
|
CONFIG_FILE: config.yml # defaults to /data/config.yml
|
2024-09-25 22:05:56 +01:00
|
|
|
|
2024-09-26 23:08:31 +01:00
|
|
|
DOCKER_HOST: "docker" # defaults to docker
|
|
|
|
DOCKER_TLS_CERTDIR: "/certs/client" # defaults to /certs/client
|
|
|
|
DOCKER_TLS_VERIFY: "1" # defaults to 0, set to 1 to enable TLS
|
2024-09-25 23:21:53 +01:00
|
|
|
|
2024-09-26 23:08:31 +01:00
|
|
|
FORGEJO_URL: ${FORGEJO_URL} # defaults to http://forgejo:3000
|
|
|
|
FORGEJO_SECRET: "{SHARED_SECRET}" # shared secret, must match Forgejo's, overrides RUNNER_TOKEN
|
2024-09-25 23:21:53 +01:00
|
|
|
|
2024-09-26 23:08:31 +01:00
|
|
|
RUNNER_FILE: .runner # defaults to /data/runner.json
|
|
|
|
RUNNER_NAME: forgejo-runner # defaults to forgejo-runner, used for registration
|
|
|
|
RUNNER_TOKEN: "${RUNNER_TOKEN}"
|
|
|
|
RUNNER_USER: 1000 # defaults to 1000, allows for automatic file ownership
|
2024-09-25 23:21:53 +01:00
|
|
|
|
2024-09-26 23:08:31 +01:00
|
|
|
DEBUG: "true" # defaults to false, set to true to enable debug logging
|
|
|
|
SKIP_WAIT: "false" # defaults to false, set to true to skip the 10 second wait to allow for forgejo and docker-in-docker to start
|