initial commit
This commit is contained in:
2
.gitignore
vendored
Normal file
2
.gitignore
vendored
Normal file
@@ -0,0 +1,2 @@
|
||||
decrypted.env
|
||||
key.txt
|
||||
11
butane.bu
Normal file
11
butane.bu
Normal file
@@ -0,0 +1,11 @@
|
||||
variant: fcos
|
||||
version: 1.6.0
|
||||
ignition:
|
||||
config:
|
||||
merge:
|
||||
# Base config
|
||||
- source: https://git.mrmeeb.stream/mrmeeb-labs/core-infrastructure/raw/branch/main/ignition/base.ign
|
||||
# Install python3
|
||||
- source: https://git.mrmeeb.stream/mrmeeb-labs/core-infrastructure/raw/branch/main/ignition/base-install-python3.ign
|
||||
# Install docker
|
||||
- source: https://git.mrmeeb.stream/mrmeeb-labs/core-infrastructure/raw/branch/main/ignition/base-install-docker.ign
|
||||
1
key.pub
Normal file
1
key.pub
Normal file
@@ -0,0 +1 @@
|
||||
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
|
||||
12
komodo/komodo.service
Normal file
12
komodo/komodo.service
Normal file
@@ -0,0 +1,12 @@
|
||||
[Unit]
|
||||
Description=Agent to connect with Komodo Core
|
||||
|
||||
[Service]
|
||||
Environment=HOME=/var/home/core
|
||||
Environment=PERIPHERY_ROOT_DIRECTORY=/var/home/core/.config/komodo
|
||||
ExecStart=/bin/sh -lc /usr/local/bin/komodo
|
||||
Restart=on-failure
|
||||
TimeoutStartSec=0
|
||||
|
||||
[Install]
|
||||
WantedBy=default.target
|
||||
41
stacks/supporting-services/docker-compose.yaml
Normal file
41
stacks/supporting-services/docker-compose.yaml
Normal file
@@ -0,0 +1,41 @@
|
||||
services:
|
||||
|
||||
telegraf:
|
||||
image: telegraf
|
||||
container_name: telegraf
|
||||
restart: unless-stopped
|
||||
privileged: true
|
||||
user: telegraf:985 # make telegraf run with docker group (985) to access docker socket
|
||||
hostname: ${HOSTNAME} # picks up the hostname of komodo-periphery
|
||||
volumes:
|
||||
- ${DROOT}/telegraf/telegraf.conf:/etc/telegraf/telegraf.conf:ro
|
||||
# Add host fs
|
||||
- /:/hostfs:ro
|
||||
# Add host net specifically
|
||||
- /proc/net:/hostfs/proc/net
|
||||
# Add host docker
|
||||
- /var/run/docker.sock:/var/run/docker.sock:z
|
||||
environment:
|
||||
- HOST_MOUNT_PREFIX=/hostfs
|
||||
- HOST_PROC=/hostfs/proc
|
||||
|
||||
certbot:
|
||||
image: git.mrmeeb.stream/mrmeeb/certbot-cron:latest
|
||||
container_name: certbot
|
||||
restart: unless-stopped
|
||||
ports:
|
||||
- 80:80
|
||||
volumes:
|
||||
- ${DROOT}/certbot:/config
|
||||
environment:
|
||||
- PUID=${PUID}
|
||||
- PGID=${PGID}
|
||||
- TZ=Europe/London
|
||||
- APPRISE_URL=${CERTBOT_DISCORD_WEBHOOK}
|
||||
- NOTIFY_ON_FAILURE=true
|
||||
- EMAIL=admin@mrmeeb.stream
|
||||
- CERT_COUNT=1
|
||||
- DOMAINS=${HOSTNAME_FULL},${HOSTNAME}
|
||||
- PLUGIN=standalone
|
||||
- CUSTOM_CA=mrmeeb.pem
|
||||
- CUSTOM_CA_SERVER=https://ca.internal/acme/acme/directory
|
||||
12
stacks/supporting-services/supporting-services.toml
Normal file
12
stacks/supporting-services/supporting-services.toml
Normal file
@@ -0,0 +1,12 @@
|
||||
[[stack]]
|
||||
name = "fcos-test-4-supporting-services"
|
||||
description = "Supporting services for fcos-test-4"
|
||||
tags = ["fcos-test-4"]
|
||||
[stack.config]
|
||||
server_id = "fcos-test-4"
|
||||
project_name = "supporting-services"
|
||||
run_directory = "stacks/supporting-services"
|
||||
file_paths = ["docker-compose.yaml"]
|
||||
env_file_path = ".komodo-env"
|
||||
additional_env_files = [".env","/var/docker/.ansible-generated.env"]
|
||||
linked_repo = "mrmeeb-labs/fcos-test-4"
|
||||
14019
stacks/supporting-services/telegraf.conf
Normal file
14019
stacks/supporting-services/telegraf.conf
Normal file
File diff suppressed because it is too large
Load Diff
7
stacks/test/.env
Normal file
7
stacks/test/.env
Normal file
@@ -0,0 +1,7 @@
|
||||
DROOT=ENC[AES256_GCM,data:vD1rapek46LPXwZP6fc3dg==,iv:DTTlQi44IAaffFwDn99rHexhanmOscyFtUoZd5c6SLc=,tag:3ZL5cfeNPBTadVeIz+v7Lg==,type:str]
|
||||
sops_age__list_0__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IG1sa2VtNzY4eDI1NTE5IGJqbzBxd0Rv\nK0taQmpkWE9WUS9TTFpRbmxmRDMvbThLQWxvK3JEOW5XNUtvRllhSVFSNW0rSEFj\nblR4dFhRV0Rzc2FteGprb1ErUUpKWVlIay9WYUJnempDbGRmNUZ5T2E1ZGJ5Z0ly\nZ2dpMWpqNlE4RmJ2cFM0N0RHQXp5SjA1cS9zODRia2syZEFvT3EwalN1Mi8vcjUr\nOXlXOXlPN0RybjhtU0x5VHNmMVBUay9QVlF6VWZVcW03c0tOWTRxY3hEM3JqMmsy\nRHdkSUV4Q2JjWm1WSGd5U01MY1FZaDZuR2h4N3AzeThXQkhPa3kzNU5VemFzMm4x\nUEdnWWV2VHp4Y1lKQWFFcVdTbWpWK09vek0ycXhWdVkwQ3dycUNwdFl6Y1RtdXJC\nQTd5bnFvY1BYRHlqaVdWTjBuSXVwRTdLT2d6eWREK2ZUaE1mTTBkb0ZRcUFXaDFI\nT3N5MkFqRm5WVUh3UjVDc05CVnlucXAwS3VCakQ5Q054d1JrSU5ZM3k5VHQyRi9j\ncFBQSlk0V0xNQitwOWRLNlpvWUlES2R6YS84a3JzVVFtM1psZnNIdHlsVHgxSmtV\naVcrZ0F3Rm04Unl6WXM4YXB6NFR6OTVNNnM5bEp6SWhYN3F2QmRuRFhzaDRMdEhS\nQmcyZjl1cU9QR0dxeEczZTA5R2cvbVlEdFNtMW15NGhsclZsUnlSMkN0elNTU1dW\naUNVdmNpQ2J1WEl5eEpiUjkxK2JZZGVLODh6V0N3dEpyYzk4V24rZjZjWWY4cGFZ\naTVEbm5YV0I3ZUZJb0JZTlQ2Wlh6YzF0UWZTc0dTd3QxOC9jWGRQa25PbDdGZTZR\nTE1XSVVuemlaa3A1d1Z4UUVuckJmem9HMTlpUmZtanNBTGVhZHc3UHJPN3MybUpm\nbjVlQ3RadDJKeU40MllCMVBTbFp6N21rUHEybUJpRU81NTZaY2R0L2U0bXB3OUov\nenBjT0tNSjhkTVlJREF4SVB3aUhFdWtZY1MvQXpFeEx1TkJOSk1sTnh3ZEc5c3c5\nK3A3aVN4RDBlcWxvSnJ0NnZtOUhubmRpQWUzeUVxeGVmS2N5NFFpUUJydHZvR1dl\nYTU5QjlkZ3ZoMzIrQmZhMmlaVnlVaHpLWjQxVkNvbjRCYm9neFV6TW1YZXVkODZC\nRkhrRTQ5MnJJVnJmVk9aTGNLZ2pZdDFnNDJQV2dzRi9oRjFmVUtqdkZpN0RoM0ln\nUysvWFZSd2o0RG1Gc1hRaFBrN1ZDRU5hMU80R1FhVGtkc2cwZ1oxckJMcGViSUcv\nR2grMk9tNExtSUZMeU5qL2lzVS9DNFVicy9jOFQ5Wis1cDVMb1pXd0pTR09RU000\nSjFZeHdQUi9IMHBMRllrcllKQXNic1BySkRPdVc5c3JoeS9DU3NndkxRVVp4V2I3\nVEtyVFRBYUw2UlhidEttU3Q3NmhTQlZNYnkwNGtldk56QnFaL0ZiaU1Kc1hsZm9W\nelJ4RXFBWEJ1cUxGcmxoSHkrLzZXRktkOGw1a1R0VmpOTk0zV0NIbUMvaVBwZXdE\neG9wT1dsTHY3dDJWcHVoMEFLUTNocXNTNmUzc0N3QytQNnRRdG9JSk9SR3ZIYytO\ndDZpS0hnSTdMcDAwRjliaGdRa0dxVFdGUGR6Sm13NGF6cG8rV1BvM1JtSUFJMzdF\nRXk4NTY0M1kwa0p0WklsYXU5K2J4dm9WbGVNZ09BMnJlUG1wVitOVXQ3RGJ4UzRl\nRVozUlgxTmU5RW5OYnIzcmJXVVg2L1lnemszYWVwdm11bENndGdEcmd0YnF1T05k\nUStQTDgzMFhsR3h0V0Q5MFFmUGovYjFqQm1UOTRPZWRra3ROUjVqRkh2a1NIbnBh\ncXp3WDR4Vkt5d1VZZjNaVGFrMEZpUUtUVm5vZW9uUzdPSmtkM1M2dmRXek5Xb1FJ\ncFRSZDZGbENaU1ZNaUtTZTVramNpU2JGZjBtdWFxbDFiQVZLYUhBNUxLVzdOZwpZ\nMU1veHJUazFYQ2FHUzJFb3Foc2IvL0daeUZPUFc5Q3pBTzhqZ3RBZnNJCi0tLSBQ\naEltRkgzQzBQNkNweVJSbEk3dkY0WXNqeVMyTEYwZGhDeDdHN1RkZEpRCoOUmyhr\ndnVfyG3obgCHBnDaIIyIhU7xEHxz/EQE6OLYEuaVy/gPuM25O5QmaKAja1z4z0ee\n6+Uu3ZJOcGK6P/A=\n-----END AGE ENCRYPTED FILE-----\n
|
||||
sops_age__list_0__map_recipient=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
|
||||
sops_lastmodified=2026-04-03T15:30:11Z
|
||||
sops_mac=ENC[AES256_GCM,data:J6g3Kup9QHh6i14C+2o3UiRQQRBx8thy2vv+jli2w6fjqO2f2UVK+MC8civ80ZmEl0ZSAeQIEuQX/aZZhvCNnzXSEFCveWUR2qUTeEcszYJ9OqV5PX+nBEDW/ZDXlghVuw0hBDztJf04Oauki7dRcXsay43rXXiaTthZLMWQBOQ=,iv:mwJwyohsx93bLvjJShR8knSnq2+UMdP9G/TRD9HHOTk=,tag:oSTZVpHx7o4KDzyBRjBCYQ==,type:str]
|
||||
sops_unencrypted_suffix=_unencrypted
|
||||
sops_version=3.12.1
|
||||
11
stacks/test/docker-compose.yaml
Normal file
11
stacks/test/docker-compose.yaml
Normal file
@@ -0,0 +1,11 @@
|
||||
services:
|
||||
nginx:
|
||||
image: lscr.io/linuxserver/nginx:latest
|
||||
container_name: nginx
|
||||
environment:
|
||||
- PUID=${PUID}
|
||||
- PGID=${PGID}
|
||||
- TZ=Etc/UTC
|
||||
ports:
|
||||
- 443:443
|
||||
restart: unless-stopped
|
||||
15
stacks/test/test.toml
Normal file
15
stacks/test/test.toml
Normal file
@@ -0,0 +1,15 @@
|
||||
[[stack]]
|
||||
name = "test"
|
||||
description = "test"
|
||||
tags = ["fcos-test-4"]
|
||||
[stack.config]
|
||||
server_id = "fcos-test-4"
|
||||
project_name = "test"
|
||||
run_directory = "stacks/test"
|
||||
file_paths = ["docker-compose.yaml"]
|
||||
env_file_path = ".komodo-env"
|
||||
additional_env_files = [".env","/var/docker/.ansible-generated.env"]
|
||||
pre_deploy.command = """
|
||||
docker run --rm -i -v /var/home/core:/root -v /var/docker:/var/docker ghcr.io/getsops/sops:v3.12.1 decrypt /var/docker/.supporting-services/komodo/repos/mrmeeb-labs/fcos-test-4/stacks/test/.env
|
||||
"""
|
||||
linked_repo = "mrmeeb-labs/fcos-test-4"
|
||||
Reference in New Issue
Block a user