Coornhert
c481ebf9e7
- Forgejo + Redis Docker stack (wetgit-forgejo role) - FastAPI + Celery systemd services (wetgit-app role) - Nginx vhosts voor git.wetgit.nl en api.wetgit.nl (wetgit-nginx role) - SSL via Let's Encrypt (certbot webroot) - Backup script (forgejo dump, geen downtime) - Codeberg mirror script - Cron jobs voor backup/mirror/log cleanup - Ansible vault voor secrets (encrypted) Geïsoleerd van dt-platform: eigen poorten, users, directories.
45 lines
1.1 KiB
Django/Jinja
45 lines
1.1 KiB
Django/Jinja
services:
|
|
forgejo:
|
|
image: codeberg.org/forgejo/forgejo:10
|
|
container_name: wetgit-forgejo
|
|
restart: unless-stopped
|
|
environment:
|
|
- USER_UID={{ wetgit_uid }}
|
|
- USER_GID={{ wetgit_gid }}
|
|
volumes:
|
|
- {{ forgejo_data_dir }}:/data
|
|
- /etc/timezone:/etc/timezone:ro
|
|
- /etc/localtime:/etc/localtime:ro
|
|
ports:
|
|
- "{{ backend_host }}:{{ forgejo_port }}:3000"
|
|
deploy:
|
|
resources:
|
|
limits:
|
|
memory: 1G
|
|
cpus: "2.0"
|
|
reservations:
|
|
memory: 256M
|
|
cpus: "0.5"
|
|
healthcheck:
|
|
test: ["CMD", "curl", "-f", "http://localhost:3000/api/v1/version"]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
networks:
|
|
- wetgit
|
|
|
|
redis:
|
|
image: redis:7-alpine
|
|
container_name: wetgit-redis
|
|
restart: unless-stopped
|
|
ports:
|
|
- "{{ backend_host }}:{{ redis_port }}:6379"
|
|
volumes:
|
|
- {{ data_dir }}/redis:/data
|
|
command: redis-server --appendonly yes --maxmemory 256mb --maxmemory-policy allkeys-lru
|
|
networks:
|
|
- wetgit
|
|
|
|
networks:
|
|
wetgit:
|
|
name: wetgit-network
|