70 lines
2.3 KiB
Plaintext
70 lines
2.3 KiB
Plaintext
# Depends on base-install-docker
|
|
# Installs Komodo Periphery, Telegraf, sops and step-ca
|
|
variant: fcos
|
|
version: 1.6.0
|
|
|
|
storage:
|
|
directories:
|
|
- path: /var/docker/.supporting-services/komodo/repos/mrmeeb-labs/supporting-services
|
|
user:
|
|
name: core
|
|
group:
|
|
name: docker
|
|
# Create sops config directory
|
|
- path: /var/home/core/.config/sops/age
|
|
user:
|
|
name: core
|
|
group:
|
|
name: core
|
|
files:
|
|
# Configure telegraf
|
|
- path: /var/docker/.supporting-services/telegraf/telegraf.conf
|
|
user:
|
|
name: core
|
|
group:
|
|
name: docker
|
|
contents:
|
|
source: https://git.mrmeeb.stream/mrmeeb-labs/supporting-services/raw/branch/main/telegraf.conf
|
|
# Add docker compose file
|
|
- path: /var/docker/.supporting-services/komodo/repos/mrmeeb-labs/supporting-services/docker-compose.yml
|
|
user:
|
|
name: core
|
|
group:
|
|
name: docker
|
|
contents:
|
|
source: https://git.mrmeeb.stream/mrmeeb-labs/supporting-services/raw/branch/main/docker-compose.yml
|
|
# Add .env file
|
|
- path: /var/docker/.supporting-services/komodo/repos/mrmeeb-labs/supporting-services/.env
|
|
user:
|
|
name: core
|
|
group:
|
|
name: docker
|
|
contents:
|
|
source: https://git.mrmeeb.stream/mrmeeb-labs/supporting-services/raw/branch/main/.env
|
|
- path: /var/home/core/.bashrc
|
|
append:
|
|
- inline: |
|
|
alias step='docker run --rm -t -v /var/home/core:/home/step -e STEPPATH=/home/step/.step smallstep/step-cli step'
|
|
alias sops='docker run --rm -t -v /var/home/core:/root -v /var/docker:/var/docker ghcr.io/getsops/sops:v3.11.0'
|
|
|
|
systemd:
|
|
units:
|
|
# Bootstrap step-ca
|
|
- name: bootstrap-step-ca.service
|
|
enabled: true
|
|
contents: |
|
|
[Unit]
|
|
Description=Bootstrap step-ca
|
|
Wants=network-online.target
|
|
After=rpm-ostree-install-docker-ce.service
|
|
Before=zincati.service
|
|
ConditionPathExists=!/var/lib/%N.stamp
|
|
|
|
[Service]
|
|
Type=oneshot
|
|
RemainAfterExit=yes
|
|
ExecStart=/usr/bin/docker run --rm -v /var/home/core:/home/step -e STEPPATH=/home/step/.step smallstep/step-cli step ca bootstrap --team mtls --team-url "https://mrmeeb.co.uk/step/<>"
|
|
ExecStart=/usr/bin/touch /var/lib/%N.stamp
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target |