first commit
This commit is contained in:
commit
c5e06f402f
628 changed files with 6475 additions and 0 deletions
42
.terraform.lock.hcl
Normal file
42
.terraform.lock.hcl
Normal file
|
|
@ -0,0 +1,42 @@
|
||||||
|
# This file is maintained automatically by "terraform init".
|
||||||
|
# Manual edits may be lost in future updates.
|
||||||
|
|
||||||
|
provider "registry.terraform.io/hashicorp/helm" {
|
||||||
|
version = "2.17.0"
|
||||||
|
constraints = "~> 2.12"
|
||||||
|
hashes = [
|
||||||
|
"h1:K5FEjxvDnxb1JF1kG1xr8J3pNGxoaR3Z0IBG9Csm/Is=",
|
||||||
|
"zh:06fb4e9932f0afc1904d2279e6e99353c2ddac0d765305ce90519af410706bd4",
|
||||||
|
"zh:104eccfc781fc868da3c7fec4385ad14ed183eb985c96331a1a937ac79c2d1a7",
|
||||||
|
"zh:129345c82359837bb3f0070ce4891ec232697052f7d5ccf61d43d818912cf5f3",
|
||||||
|
"zh:3956187ec239f4045975b35e8c30741f701aa494c386aaa04ebabffe7749f81c",
|
||||||
|
"zh:66a9686d92a6b3ec43de3ca3fde60ef3d89fb76259ed3313ca4eb9bb8c13b7dd",
|
||||||
|
"zh:88644260090aa621e7e8083585c468c8dd5e09a3c01a432fb05da5c4623af940",
|
||||||
|
"zh:a248f650d174a883b32c5b94f9e725f4057e623b00f171936dcdcc840fad0b3e",
|
||||||
|
"zh:aa498c1f1ab93be5c8fbf6d48af51dc6ef0f10b2ea88d67bcb9f02d1d80d3930",
|
||||||
|
"zh:bf01e0f2ec2468c53596e027d376532a2d30feb72b0b5b810334d043109ae32f",
|
||||||
|
"zh:c46fa84cc8388e5ca87eb575a534ebcf68819c5a5724142998b487cb11246654",
|
||||||
|
"zh:d0c0f15ffc115c0965cbfe5c81f18c2e114113e7a1e6829f6bfd879ce5744fbb",
|
||||||
|
"zh:f569b65999264a9416862bca5cd2a6177d94ccb0424f3a4ef424428912b9cb3c",
|
||||||
|
]
|
||||||
|
}
|
||||||
|
|
||||||
|
provider "registry.terraform.io/hashicorp/kubernetes" {
|
||||||
|
version = "2.38.0"
|
||||||
|
constraints = "~> 2.26"
|
||||||
|
hashes = [
|
||||||
|
"h1:5CkveFo5ynsLdzKk+Kv+r7+U9rMrNjfZPT3a0N/fhgE=",
|
||||||
|
"zh:0af928d776eb269b192dc0ea0f8a3f0f5ec117224cd644bdacdc682300f84ba0",
|
||||||
|
"zh:1be998e67206f7cfc4ffe77c01a09ac91ce725de0abaec9030b22c0a832af44f",
|
||||||
|
"zh:326803fe5946023687d603f6f1bab24de7af3d426b01d20e51d4e6fbe4e7ec1b",
|
||||||
|
"zh:4a99ec8d91193af961de1abb1f824be73df07489301d62e6141a656b3ebfff12",
|
||||||
|
"zh:5136e51765d6a0b9e4dbcc3b38821e9736bd2136cf15e9aac11668f22db117d2",
|
||||||
|
"zh:63fab47349852d7802fb032e4f2b6a101ee1ce34b62557a9ad0f0f0f5b6ecfdc",
|
||||||
|
"zh:924fb0257e2d03e03e2bfe9c7b99aa73c195b1f19412ca09960001bee3c50d15",
|
||||||
|
"zh:b63a0be5e233f8f6727c56bed3b61eb9456ca7a8bb29539fba0837f1badf1396",
|
||||||
|
"zh:d39861aa21077f1bc899bc53e7233262e530ba8a3a2d737449b100daeb303e4d",
|
||||||
|
"zh:de0805e10ebe4c83ce3b728a67f6b0f9d18be32b25146aa89116634df5145ad4",
|
||||||
|
"zh:f569b65999264a9416862bca5cd2a6177d94ccb0424f3a4ef424428912b9cb3c",
|
||||||
|
"zh:faf23e45f0090eef8ba28a8aac7ec5d4fdf11a36c40a8d286304567d71c1e7db",
|
||||||
|
]
|
||||||
|
}
|
||||||
|
|
@ -0,0 +1,375 @@
|
||||||
|
Copyright (c) 2017 HashiCorp, Inc.
|
||||||
|
|
||||||
|
Mozilla Public License Version 2.0
|
||||||
|
==================================
|
||||||
|
|
||||||
|
1. Definitions
|
||||||
|
--------------
|
||||||
|
|
||||||
|
1.1. "Contributor"
|
||||||
|
means each individual or legal entity that creates, contributes to
|
||||||
|
the creation of, or owns Covered Software.
|
||||||
|
|
||||||
|
1.2. "Contributor Version"
|
||||||
|
means the combination of the Contributions of others (if any) used
|
||||||
|
by a Contributor and that particular Contributor's Contribution.
|
||||||
|
|
||||||
|
1.3. "Contribution"
|
||||||
|
means Covered Software of a particular Contributor.
|
||||||
|
|
||||||
|
1.4. "Covered Software"
|
||||||
|
means Source Code Form to which the initial Contributor has attached
|
||||||
|
the notice in Exhibit A, the Executable Form of such Source Code
|
||||||
|
Form, and Modifications of such Source Code Form, in each case
|
||||||
|
including portions thereof.
|
||||||
|
|
||||||
|
1.5. "Incompatible With Secondary Licenses"
|
||||||
|
means
|
||||||
|
|
||||||
|
(a) that the initial Contributor has attached the notice described
|
||||||
|
in Exhibit B to the Covered Software; or
|
||||||
|
|
||||||
|
(b) that the Covered Software was made available under the terms of
|
||||||
|
version 1.1 or earlier of the License, but not also under the
|
||||||
|
terms of a Secondary License.
|
||||||
|
|
||||||
|
1.6. "Executable Form"
|
||||||
|
means any form of the work other than Source Code Form.
|
||||||
|
|
||||||
|
1.7. "Larger Work"
|
||||||
|
means a work that combines Covered Software with other material, in
|
||||||
|
a separate file or files, that is not Covered Software.
|
||||||
|
|
||||||
|
1.8. "License"
|
||||||
|
means this document.
|
||||||
|
|
||||||
|
1.9. "Licensable"
|
||||||
|
means having the right to grant, to the maximum extent possible,
|
||||||
|
whether at the time of the initial grant or subsequently, any and
|
||||||
|
all of the rights conveyed by this License.
|
||||||
|
|
||||||
|
1.10. "Modifications"
|
||||||
|
means any of the following:
|
||||||
|
|
||||||
|
(a) any file in Source Code Form that results from an addition to,
|
||||||
|
deletion from, or modification of the contents of Covered
|
||||||
|
Software; or
|
||||||
|
|
||||||
|
(b) any new file in Source Code Form that contains any Covered
|
||||||
|
Software.
|
||||||
|
|
||||||
|
1.11. "Patent Claims" of a Contributor
|
||||||
|
means any patent claim(s), including without limitation, method,
|
||||||
|
process, and apparatus claims, in any patent Licensable by such
|
||||||
|
Contributor that would be infringed, but for the grant of the
|
||||||
|
License, by the making, using, selling, offering for sale, having
|
||||||
|
made, import, or transfer of either its Contributions or its
|
||||||
|
Contributor Version.
|
||||||
|
|
||||||
|
1.12. "Secondary License"
|
||||||
|
means either the GNU General Public License, Version 2.0, the GNU
|
||||||
|
Lesser General Public License, Version 2.1, the GNU Affero General
|
||||||
|
Public License, Version 3.0, or any later versions of those
|
||||||
|
licenses.
|
||||||
|
|
||||||
|
1.13. "Source Code Form"
|
||||||
|
means the form of the work preferred for making modifications.
|
||||||
|
|
||||||
|
1.14. "You" (or "Your")
|
||||||
|
means an individual or a legal entity exercising rights under this
|
||||||
|
License. For legal entities, "You" includes any entity that
|
||||||
|
controls, is controlled by, or is under common control with You. For
|
||||||
|
purposes of this definition, "control" means (a) the power, direct
|
||||||
|
or indirect, to cause the direction or management of such entity,
|
||||||
|
whether by contract or otherwise, or (b) ownership of more than
|
||||||
|
fifty percent (50%) of the outstanding shares or beneficial
|
||||||
|
ownership of such entity.
|
||||||
|
|
||||||
|
2. License Grants and Conditions
|
||||||
|
--------------------------------
|
||||||
|
|
||||||
|
2.1. Grants
|
||||||
|
|
||||||
|
Each Contributor hereby grants You a world-wide, royalty-free,
|
||||||
|
non-exclusive license:
|
||||||
|
|
||||||
|
(a) under intellectual property rights (other than patent or trademark)
|
||||||
|
Licensable by such Contributor to use, reproduce, make available,
|
||||||
|
modify, display, perform, distribute, and otherwise exploit its
|
||||||
|
Contributions, either on an unmodified basis, with Modifications, or
|
||||||
|
as part of a Larger Work; and
|
||||||
|
|
||||||
|
(b) under Patent Claims of such Contributor to make, use, sell, offer
|
||||||
|
for sale, have made, import, and otherwise transfer either its
|
||||||
|
Contributions or its Contributor Version.
|
||||||
|
|
||||||
|
2.2. Effective Date
|
||||||
|
|
||||||
|
The licenses granted in Section 2.1 with respect to any Contribution
|
||||||
|
become effective for each Contribution on the date the Contributor first
|
||||||
|
distributes such Contribution.
|
||||||
|
|
||||||
|
2.3. Limitations on Grant Scope
|
||||||
|
|
||||||
|
The licenses granted in this Section 2 are the only rights granted under
|
||||||
|
this License. No additional rights or licenses will be implied from the
|
||||||
|
distribution or licensing of Covered Software under this License.
|
||||||
|
Notwithstanding Section 2.1(b) above, no patent license is granted by a
|
||||||
|
Contributor:
|
||||||
|
|
||||||
|
(a) for any code that a Contributor has removed from Covered Software;
|
||||||
|
or
|
||||||
|
|
||||||
|
(b) for infringements caused by: (i) Your and any other third party's
|
||||||
|
modifications of Covered Software, or (ii) the combination of its
|
||||||
|
Contributions with other software (except as part of its Contributor
|
||||||
|
Version); or
|
||||||
|
|
||||||
|
(c) under Patent Claims infringed by Covered Software in the absence of
|
||||||
|
its Contributions.
|
||||||
|
|
||||||
|
This License does not grant any rights in the trademarks, service marks,
|
||||||
|
or logos of any Contributor (except as may be necessary to comply with
|
||||||
|
the notice requirements in Section 3.4).
|
||||||
|
|
||||||
|
2.4. Subsequent Licenses
|
||||||
|
|
||||||
|
No Contributor makes additional grants as a result of Your choice to
|
||||||
|
distribute the Covered Software under a subsequent version of this
|
||||||
|
License (see Section 10.2) or under the terms of a Secondary License (if
|
||||||
|
permitted under the terms of Section 3.3).
|
||||||
|
|
||||||
|
2.5. Representation
|
||||||
|
|
||||||
|
Each Contributor represents that the Contributor believes its
|
||||||
|
Contributions are its original creation(s) or it has sufficient rights
|
||||||
|
to grant the rights to its Contributions conveyed by this License.
|
||||||
|
|
||||||
|
2.6. Fair Use
|
||||||
|
|
||||||
|
This License is not intended to limit any rights You have under
|
||||||
|
applicable copyright doctrines of fair use, fair dealing, or other
|
||||||
|
equivalents.
|
||||||
|
|
||||||
|
2.7. Conditions
|
||||||
|
|
||||||
|
Sections 3.1, 3.2, 3.3, and 3.4 are conditions of the licenses granted
|
||||||
|
in Section 2.1.
|
||||||
|
|
||||||
|
3. Responsibilities
|
||||||
|
-------------------
|
||||||
|
|
||||||
|
3.1. Distribution of Source Form
|
||||||
|
|
||||||
|
All distribution of Covered Software in Source Code Form, including any
|
||||||
|
Modifications that You create or to which You contribute, must be under
|
||||||
|
the terms of this License. You must inform recipients that the Source
|
||||||
|
Code Form of the Covered Software is governed by the terms of this
|
||||||
|
License, and how they can obtain a copy of this License. You may not
|
||||||
|
attempt to alter or restrict the recipients' rights in the Source Code
|
||||||
|
Form.
|
||||||
|
|
||||||
|
3.2. Distribution of Executable Form
|
||||||
|
|
||||||
|
If You distribute Covered Software in Executable Form then:
|
||||||
|
|
||||||
|
(a) such Covered Software must also be made available in Source Code
|
||||||
|
Form, as described in Section 3.1, and You must inform recipients of
|
||||||
|
the Executable Form how they can obtain a copy of such Source Code
|
||||||
|
Form by reasonable means in a timely manner, at a charge no more
|
||||||
|
than the cost of distribution to the recipient; and
|
||||||
|
|
||||||
|
(b) You may distribute such Executable Form under the terms of this
|
||||||
|
License, or sublicense it under different terms, provided that the
|
||||||
|
license for the Executable Form does not attempt to limit or alter
|
||||||
|
the recipients' rights in the Source Code Form under this License.
|
||||||
|
|
||||||
|
3.3. Distribution of a Larger Work
|
||||||
|
|
||||||
|
You may create and distribute a Larger Work under terms of Your choice,
|
||||||
|
provided that You also comply with the requirements of this License for
|
||||||
|
the Covered Software. If the Larger Work is a combination of Covered
|
||||||
|
Software with a work governed by one or more Secondary Licenses, and the
|
||||||
|
Covered Software is not Incompatible With Secondary Licenses, this
|
||||||
|
License permits You to additionally distribute such Covered Software
|
||||||
|
under the terms of such Secondary License(s), so that the recipient of
|
||||||
|
the Larger Work may, at their option, further distribute the Covered
|
||||||
|
Software under the terms of either this License or such Secondary
|
||||||
|
License(s).
|
||||||
|
|
||||||
|
3.4. Notices
|
||||||
|
|
||||||
|
You may not remove or alter the substance of any license notices
|
||||||
|
(including copyright notices, patent notices, disclaimers of warranty,
|
||||||
|
or limitations of liability) contained within the Source Code Form of
|
||||||
|
the Covered Software, except that You may alter any license notices to
|
||||||
|
the extent required to remedy known factual inaccuracies.
|
||||||
|
|
||||||
|
3.5. Application of Additional Terms
|
||||||
|
|
||||||
|
You may choose to offer, and to charge a fee for, warranty, support,
|
||||||
|
indemnity or liability obligations to one or more recipients of Covered
|
||||||
|
Software. However, You may do so only on Your own behalf, and not on
|
||||||
|
behalf of any Contributor. You must make it absolutely clear that any
|
||||||
|
such warranty, support, indemnity, or liability obligation is offered by
|
||||||
|
You alone, and You hereby agree to indemnify every Contributor for any
|
||||||
|
liability incurred by such Contributor as a result of warranty, support,
|
||||||
|
indemnity or liability terms You offer. You may include additional
|
||||||
|
disclaimers of warranty and limitations of liability specific to any
|
||||||
|
jurisdiction.
|
||||||
|
|
||||||
|
4. Inability to Comply Due to Statute or Regulation
|
||||||
|
---------------------------------------------------
|
||||||
|
|
||||||
|
If it is impossible for You to comply with any of the terms of this
|
||||||
|
License with respect to some or all of the Covered Software due to
|
||||||
|
statute, judicial order, or regulation then You must: (a) comply with
|
||||||
|
the terms of this License to the maximum extent possible; and (b)
|
||||||
|
describe the limitations and the code they affect. Such description must
|
||||||
|
be placed in a text file included with all distributions of the Covered
|
||||||
|
Software under this License. Except to the extent prohibited by statute
|
||||||
|
or regulation, such description must be sufficiently detailed for a
|
||||||
|
recipient of ordinary skill to be able to understand it.
|
||||||
|
|
||||||
|
5. Termination
|
||||||
|
--------------
|
||||||
|
|
||||||
|
5.1. The rights granted under this License will terminate automatically
|
||||||
|
if You fail to comply with any of its terms. However, if You become
|
||||||
|
compliant, then the rights granted under this License from a particular
|
||||||
|
Contributor are reinstated (a) provisionally, unless and until such
|
||||||
|
Contributor explicitly and finally terminates Your grants, and (b) on an
|
||||||
|
ongoing basis, if such Contributor fails to notify You of the
|
||||||
|
non-compliance by some reasonable means prior to 60 days after You have
|
||||||
|
come back into compliance. Moreover, Your grants from a particular
|
||||||
|
Contributor are reinstated on an ongoing basis if such Contributor
|
||||||
|
notifies You of the non-compliance by some reasonable means, this is the
|
||||||
|
first time You have received notice of non-compliance with this License
|
||||||
|
from such Contributor, and You become compliant prior to 30 days after
|
||||||
|
Your receipt of the notice.
|
||||||
|
|
||||||
|
5.2. If You initiate litigation against any entity by asserting a patent
|
||||||
|
infringement claim (excluding declaratory judgment actions,
|
||||||
|
counter-claims, and cross-claims) alleging that a Contributor Version
|
||||||
|
directly or indirectly infringes any patent, then the rights granted to
|
||||||
|
You by any and all Contributors for the Covered Software under Section
|
||||||
|
2.1 of this License shall terminate.
|
||||||
|
|
||||||
|
5.3. In the event of termination under Sections 5.1 or 5.2 above, all
|
||||||
|
end user license agreements (excluding distributors and resellers) which
|
||||||
|
have been validly granted by You or Your distributors under this License
|
||||||
|
prior to termination shall survive termination.
|
||||||
|
|
||||||
|
************************************************************************
|
||||||
|
* *
|
||||||
|
* 6. Disclaimer of Warranty *
|
||||||
|
* ------------------------- *
|
||||||
|
* *
|
||||||
|
* Covered Software is provided under this License on an "as is" *
|
||||||
|
* basis, without warranty of any kind, either expressed, implied, or *
|
||||||
|
* statutory, including, without limitation, warranties that the *
|
||||||
|
* Covered Software is free of defects, merchantable, fit for a *
|
||||||
|
* particular purpose or non-infringing. The entire risk as to the *
|
||||||
|
* quality and performance of the Covered Software is with You. *
|
||||||
|
* Should any Covered Software prove defective in any respect, You *
|
||||||
|
* (not any Contributor) assume the cost of any necessary servicing, *
|
||||||
|
* repair, or correction. This disclaimer of warranty constitutes an *
|
||||||
|
* essential part of this License. No use of any Covered Software is *
|
||||||
|
* authorized under this License except under this disclaimer. *
|
||||||
|
* *
|
||||||
|
************************************************************************
|
||||||
|
|
||||||
|
************************************************************************
|
||||||
|
* *
|
||||||
|
* 7. Limitation of Liability *
|
||||||
|
* -------------------------- *
|
||||||
|
* *
|
||||||
|
* Under no circumstances and under no legal theory, whether tort *
|
||||||
|
* (including negligence), contract, or otherwise, shall any *
|
||||||
|
* Contributor, or anyone who distributes Covered Software as *
|
||||||
|
* permitted above, be liable to You for any direct, indirect, *
|
||||||
|
* special, incidental, or consequential damages of any character *
|
||||||
|
* including, without limitation, damages for lost profits, loss of *
|
||||||
|
* goodwill, work stoppage, computer failure or malfunction, or any *
|
||||||
|
* and all other commercial damages or losses, even if such party *
|
||||||
|
* shall have been informed of the possibility of such damages. This *
|
||||||
|
* limitation of liability shall not apply to liability for death or *
|
||||||
|
* personal injury resulting from such party's negligence to the *
|
||||||
|
* extent applicable law prohibits such limitation. Some *
|
||||||
|
* jurisdictions do not allow the exclusion or limitation of *
|
||||||
|
* incidental or consequential damages, so this exclusion and *
|
||||||
|
* limitation may not apply to You. *
|
||||||
|
* *
|
||||||
|
************************************************************************
|
||||||
|
|
||||||
|
8. Litigation
|
||||||
|
-------------
|
||||||
|
|
||||||
|
Any litigation relating to this License may be brought only in the
|
||||||
|
courts of a jurisdiction where the defendant maintains its principal
|
||||||
|
place of business and such litigation shall be governed by laws of that
|
||||||
|
jurisdiction, without reference to its conflict-of-law provisions.
|
||||||
|
Nothing in this Section shall prevent a party's ability to bring
|
||||||
|
cross-claims or counter-claims.
|
||||||
|
|
||||||
|
9. Miscellaneous
|
||||||
|
----------------
|
||||||
|
|
||||||
|
This License represents the complete agreement concerning the subject
|
||||||
|
matter hereof. If any provision of this License is held to be
|
||||||
|
unenforceable, such provision shall be reformed only to the extent
|
||||||
|
necessary to make it enforceable. Any law or regulation which provides
|
||||||
|
that the language of a contract shall be construed against the drafter
|
||||||
|
shall not be used to construe this License against a Contributor.
|
||||||
|
|
||||||
|
10. Versions of the License
|
||||||
|
---------------------------
|
||||||
|
|
||||||
|
10.1. New Versions
|
||||||
|
|
||||||
|
Mozilla Foundation is the license steward. Except as provided in Section
|
||||||
|
10.3, no one other than the license steward has the right to modify or
|
||||||
|
publish new versions of this License. Each version will be given a
|
||||||
|
distinguishing version number.
|
||||||
|
|
||||||
|
10.2. Effect of New Versions
|
||||||
|
|
||||||
|
You may distribute the Covered Software under the terms of the version
|
||||||
|
of the License under which You originally received the Covered Software,
|
||||||
|
or under the terms of any subsequent version published by the license
|
||||||
|
steward.
|
||||||
|
|
||||||
|
10.3. Modified Versions
|
||||||
|
|
||||||
|
If you create software not governed by this License, and you want to
|
||||||
|
create a new license for such software, you may create and use a
|
||||||
|
modified version of this License if you rename the license and remove
|
||||||
|
any references to the name of the license steward (except to note that
|
||||||
|
such modified license differs from this License).
|
||||||
|
|
||||||
|
10.4. Distributing Source Code Form that is Incompatible With Secondary
|
||||||
|
Licenses
|
||||||
|
|
||||||
|
If You choose to distribute Source Code Form that is Incompatible With
|
||||||
|
Secondary Licenses under the terms of this version of the License, the
|
||||||
|
notice described in Exhibit B of this License must be attached.
|
||||||
|
|
||||||
|
Exhibit A - Source Code Form License Notice
|
||||||
|
-------------------------------------------
|
||||||
|
|
||||||
|
This Source Code Form is subject to the terms of the Mozilla Public
|
||||||
|
License, v. 2.0. If a copy of the MPL was not distributed with this
|
||||||
|
file, You can obtain one at http://mozilla.org/MPL/2.0/.
|
||||||
|
|
||||||
|
If it is not possible or desirable to put the notice in a particular
|
||||||
|
file, then You may include the notice in a location (such as a LICENSE
|
||||||
|
file in a relevant directory) where a recipient would be likely to look
|
||||||
|
for such a notice.
|
||||||
|
|
||||||
|
You may add additional accurate notices of copyright ownership.
|
||||||
|
|
||||||
|
Exhibit B - "Incompatible With Secondary Licenses" Notice
|
||||||
|
---------------------------------------------------------
|
||||||
|
|
||||||
|
This Source Code Form is "Incompatible With Secondary Licenses", as
|
||||||
|
defined by the Mozilla Public License, v. 2.0.
|
||||||
Binary file not shown.
|
|
@ -0,0 +1,375 @@
|
||||||
|
Copyright (c) 2017 HashiCorp, Inc.
|
||||||
|
|
||||||
|
Mozilla Public License Version 2.0
|
||||||
|
==================================
|
||||||
|
|
||||||
|
1. Definitions
|
||||||
|
--------------
|
||||||
|
|
||||||
|
1.1. "Contributor"
|
||||||
|
means each individual or legal entity that creates, contributes to
|
||||||
|
the creation of, or owns Covered Software.
|
||||||
|
|
||||||
|
1.2. "Contributor Version"
|
||||||
|
means the combination of the Contributions of others (if any) used
|
||||||
|
by a Contributor and that particular Contributor's Contribution.
|
||||||
|
|
||||||
|
1.3. "Contribution"
|
||||||
|
means Covered Software of a particular Contributor.
|
||||||
|
|
||||||
|
1.4. "Covered Software"
|
||||||
|
means Source Code Form to which the initial Contributor has attached
|
||||||
|
the notice in Exhibit A, the Executable Form of such Source Code
|
||||||
|
Form, and Modifications of such Source Code Form, in each case
|
||||||
|
including portions thereof.
|
||||||
|
|
||||||
|
1.5. "Incompatible With Secondary Licenses"
|
||||||
|
means
|
||||||
|
|
||||||
|
(a) that the initial Contributor has attached the notice described
|
||||||
|
in Exhibit B to the Covered Software; or
|
||||||
|
|
||||||
|
(b) that the Covered Software was made available under the terms of
|
||||||
|
version 1.1 or earlier of the License, but not also under the
|
||||||
|
terms of a Secondary License.
|
||||||
|
|
||||||
|
1.6. "Executable Form"
|
||||||
|
means any form of the work other than Source Code Form.
|
||||||
|
|
||||||
|
1.7. "Larger Work"
|
||||||
|
means a work that combines Covered Software with other material, in
|
||||||
|
a separate file or files, that is not Covered Software.
|
||||||
|
|
||||||
|
1.8. "License"
|
||||||
|
means this document.
|
||||||
|
|
||||||
|
1.9. "Licensable"
|
||||||
|
means having the right to grant, to the maximum extent possible,
|
||||||
|
whether at the time of the initial grant or subsequently, any and
|
||||||
|
all of the rights conveyed by this License.
|
||||||
|
|
||||||
|
1.10. "Modifications"
|
||||||
|
means any of the following:
|
||||||
|
|
||||||
|
(a) any file in Source Code Form that results from an addition to,
|
||||||
|
deletion from, or modification of the contents of Covered
|
||||||
|
Software; or
|
||||||
|
|
||||||
|
(b) any new file in Source Code Form that contains any Covered
|
||||||
|
Software.
|
||||||
|
|
||||||
|
1.11. "Patent Claims" of a Contributor
|
||||||
|
means any patent claim(s), including without limitation, method,
|
||||||
|
process, and apparatus claims, in any patent Licensable by such
|
||||||
|
Contributor that would be infringed, but for the grant of the
|
||||||
|
License, by the making, using, selling, offering for sale, having
|
||||||
|
made, import, or transfer of either its Contributions or its
|
||||||
|
Contributor Version.
|
||||||
|
|
||||||
|
1.12. "Secondary License"
|
||||||
|
means either the GNU General Public License, Version 2.0, the GNU
|
||||||
|
Lesser General Public License, Version 2.1, the GNU Affero General
|
||||||
|
Public License, Version 3.0, or any later versions of those
|
||||||
|
licenses.
|
||||||
|
|
||||||
|
1.13. "Source Code Form"
|
||||||
|
means the form of the work preferred for making modifications.
|
||||||
|
|
||||||
|
1.14. "You" (or "Your")
|
||||||
|
means an individual or a legal entity exercising rights under this
|
||||||
|
License. For legal entities, "You" includes any entity that
|
||||||
|
controls, is controlled by, or is under common control with You. For
|
||||||
|
purposes of this definition, "control" means (a) the power, direct
|
||||||
|
or indirect, to cause the direction or management of such entity,
|
||||||
|
whether by contract or otherwise, or (b) ownership of more than
|
||||||
|
fifty percent (50%) of the outstanding shares or beneficial
|
||||||
|
ownership of such entity.
|
||||||
|
|
||||||
|
2. License Grants and Conditions
|
||||||
|
--------------------------------
|
||||||
|
|
||||||
|
2.1. Grants
|
||||||
|
|
||||||
|
Each Contributor hereby grants You a world-wide, royalty-free,
|
||||||
|
non-exclusive license:
|
||||||
|
|
||||||
|
(a) under intellectual property rights (other than patent or trademark)
|
||||||
|
Licensable by such Contributor to use, reproduce, make available,
|
||||||
|
modify, display, perform, distribute, and otherwise exploit its
|
||||||
|
Contributions, either on an unmodified basis, with Modifications, or
|
||||||
|
as part of a Larger Work; and
|
||||||
|
|
||||||
|
(b) under Patent Claims of such Contributor to make, use, sell, offer
|
||||||
|
for sale, have made, import, and otherwise transfer either its
|
||||||
|
Contributions or its Contributor Version.
|
||||||
|
|
||||||
|
2.2. Effective Date
|
||||||
|
|
||||||
|
The licenses granted in Section 2.1 with respect to any Contribution
|
||||||
|
become effective for each Contribution on the date the Contributor first
|
||||||
|
distributes such Contribution.
|
||||||
|
|
||||||
|
2.3. Limitations on Grant Scope
|
||||||
|
|
||||||
|
The licenses granted in this Section 2 are the only rights granted under
|
||||||
|
this License. No additional rights or licenses will be implied from the
|
||||||
|
distribution or licensing of Covered Software under this License.
|
||||||
|
Notwithstanding Section 2.1(b) above, no patent license is granted by a
|
||||||
|
Contributor:
|
||||||
|
|
||||||
|
(a) for any code that a Contributor has removed from Covered Software;
|
||||||
|
or
|
||||||
|
|
||||||
|
(b) for infringements caused by: (i) Your and any other third party's
|
||||||
|
modifications of Covered Software, or (ii) the combination of its
|
||||||
|
Contributions with other software (except as part of its Contributor
|
||||||
|
Version); or
|
||||||
|
|
||||||
|
(c) under Patent Claims infringed by Covered Software in the absence of
|
||||||
|
its Contributions.
|
||||||
|
|
||||||
|
This License does not grant any rights in the trademarks, service marks,
|
||||||
|
or logos of any Contributor (except as may be necessary to comply with
|
||||||
|
the notice requirements in Section 3.4).
|
||||||
|
|
||||||
|
2.4. Subsequent Licenses
|
||||||
|
|
||||||
|
No Contributor makes additional grants as a result of Your choice to
|
||||||
|
distribute the Covered Software under a subsequent version of this
|
||||||
|
License (see Section 10.2) or under the terms of a Secondary License (if
|
||||||
|
permitted under the terms of Section 3.3).
|
||||||
|
|
||||||
|
2.5. Representation
|
||||||
|
|
||||||
|
Each Contributor represents that the Contributor believes its
|
||||||
|
Contributions are its original creation(s) or it has sufficient rights
|
||||||
|
to grant the rights to its Contributions conveyed by this License.
|
||||||
|
|
||||||
|
2.6. Fair Use
|
||||||
|
|
||||||
|
This License is not intended to limit any rights You have under
|
||||||
|
applicable copyright doctrines of fair use, fair dealing, or other
|
||||||
|
equivalents.
|
||||||
|
|
||||||
|
2.7. Conditions
|
||||||
|
|
||||||
|
Sections 3.1, 3.2, 3.3, and 3.4 are conditions of the licenses granted
|
||||||
|
in Section 2.1.
|
||||||
|
|
||||||
|
3. Responsibilities
|
||||||
|
-------------------
|
||||||
|
|
||||||
|
3.1. Distribution of Source Form
|
||||||
|
|
||||||
|
All distribution of Covered Software in Source Code Form, including any
|
||||||
|
Modifications that You create or to which You contribute, must be under
|
||||||
|
the terms of this License. You must inform recipients that the Source
|
||||||
|
Code Form of the Covered Software is governed by the terms of this
|
||||||
|
License, and how they can obtain a copy of this License. You may not
|
||||||
|
attempt to alter or restrict the recipients' rights in the Source Code
|
||||||
|
Form.
|
||||||
|
|
||||||
|
3.2. Distribution of Executable Form
|
||||||
|
|
||||||
|
If You distribute Covered Software in Executable Form then:
|
||||||
|
|
||||||
|
(a) such Covered Software must also be made available in Source Code
|
||||||
|
Form, as described in Section 3.1, and You must inform recipients of
|
||||||
|
the Executable Form how they can obtain a copy of such Source Code
|
||||||
|
Form by reasonable means in a timely manner, at a charge no more
|
||||||
|
than the cost of distribution to the recipient; and
|
||||||
|
|
||||||
|
(b) You may distribute such Executable Form under the terms of this
|
||||||
|
License, or sublicense it under different terms, provided that the
|
||||||
|
license for the Executable Form does not attempt to limit or alter
|
||||||
|
the recipients' rights in the Source Code Form under this License.
|
||||||
|
|
||||||
|
3.3. Distribution of a Larger Work
|
||||||
|
|
||||||
|
You may create and distribute a Larger Work under terms of Your choice,
|
||||||
|
provided that You also comply with the requirements of this License for
|
||||||
|
the Covered Software. If the Larger Work is a combination of Covered
|
||||||
|
Software with a work governed by one or more Secondary Licenses, and the
|
||||||
|
Covered Software is not Incompatible With Secondary Licenses, this
|
||||||
|
License permits You to additionally distribute such Covered Software
|
||||||
|
under the terms of such Secondary License(s), so that the recipient of
|
||||||
|
the Larger Work may, at their option, further distribute the Covered
|
||||||
|
Software under the terms of either this License or such Secondary
|
||||||
|
License(s).
|
||||||
|
|
||||||
|
3.4. Notices
|
||||||
|
|
||||||
|
You may not remove or alter the substance of any license notices
|
||||||
|
(including copyright notices, patent notices, disclaimers of warranty,
|
||||||
|
or limitations of liability) contained within the Source Code Form of
|
||||||
|
the Covered Software, except that You may alter any license notices to
|
||||||
|
the extent required to remedy known factual inaccuracies.
|
||||||
|
|
||||||
|
3.5. Application of Additional Terms
|
||||||
|
|
||||||
|
You may choose to offer, and to charge a fee for, warranty, support,
|
||||||
|
indemnity or liability obligations to one or more recipients of Covered
|
||||||
|
Software. However, You may do so only on Your own behalf, and not on
|
||||||
|
behalf of any Contributor. You must make it absolutely clear that any
|
||||||
|
such warranty, support, indemnity, or liability obligation is offered by
|
||||||
|
You alone, and You hereby agree to indemnify every Contributor for any
|
||||||
|
liability incurred by such Contributor as a result of warranty, support,
|
||||||
|
indemnity or liability terms You offer. You may include additional
|
||||||
|
disclaimers of warranty and limitations of liability specific to any
|
||||||
|
jurisdiction.
|
||||||
|
|
||||||
|
4. Inability to Comply Due to Statute or Regulation
|
||||||
|
---------------------------------------------------
|
||||||
|
|
||||||
|
If it is impossible for You to comply with any of the terms of this
|
||||||
|
License with respect to some or all of the Covered Software due to
|
||||||
|
statute, judicial order, or regulation then You must: (a) comply with
|
||||||
|
the terms of this License to the maximum extent possible; and (b)
|
||||||
|
describe the limitations and the code they affect. Such description must
|
||||||
|
be placed in a text file included with all distributions of the Covered
|
||||||
|
Software under this License. Except to the extent prohibited by statute
|
||||||
|
or regulation, such description must be sufficiently detailed for a
|
||||||
|
recipient of ordinary skill to be able to understand it.
|
||||||
|
|
||||||
|
5. Termination
|
||||||
|
--------------
|
||||||
|
|
||||||
|
5.1. The rights granted under this License will terminate automatically
|
||||||
|
if You fail to comply with any of its terms. However, if You become
|
||||||
|
compliant, then the rights granted under this License from a particular
|
||||||
|
Contributor are reinstated (a) provisionally, unless and until such
|
||||||
|
Contributor explicitly and finally terminates Your grants, and (b) on an
|
||||||
|
ongoing basis, if such Contributor fails to notify You of the
|
||||||
|
non-compliance by some reasonable means prior to 60 days after You have
|
||||||
|
come back into compliance. Moreover, Your grants from a particular
|
||||||
|
Contributor are reinstated on an ongoing basis if such Contributor
|
||||||
|
notifies You of the non-compliance by some reasonable means, this is the
|
||||||
|
first time You have received notice of non-compliance with this License
|
||||||
|
from such Contributor, and You become compliant prior to 30 days after
|
||||||
|
Your receipt of the notice.
|
||||||
|
|
||||||
|
5.2. If You initiate litigation against any entity by asserting a patent
|
||||||
|
infringement claim (excluding declaratory judgment actions,
|
||||||
|
counter-claims, and cross-claims) alleging that a Contributor Version
|
||||||
|
directly or indirectly infringes any patent, then the rights granted to
|
||||||
|
You by any and all Contributors for the Covered Software under Section
|
||||||
|
2.1 of this License shall terminate.
|
||||||
|
|
||||||
|
5.3. In the event of termination under Sections 5.1 or 5.2 above, all
|
||||||
|
end user license agreements (excluding distributors and resellers) which
|
||||||
|
have been validly granted by You or Your distributors under this License
|
||||||
|
prior to termination shall survive termination.
|
||||||
|
|
||||||
|
************************************************************************
|
||||||
|
* *
|
||||||
|
* 6. Disclaimer of Warranty *
|
||||||
|
* ------------------------- *
|
||||||
|
* *
|
||||||
|
* Covered Software is provided under this License on an "as is" *
|
||||||
|
* basis, without warranty of any kind, either expressed, implied, or *
|
||||||
|
* statutory, including, without limitation, warranties that the *
|
||||||
|
* Covered Software is free of defects, merchantable, fit for a *
|
||||||
|
* particular purpose or non-infringing. The entire risk as to the *
|
||||||
|
* quality and performance of the Covered Software is with You. *
|
||||||
|
* Should any Covered Software prove defective in any respect, You *
|
||||||
|
* (not any Contributor) assume the cost of any necessary servicing, *
|
||||||
|
* repair, or correction. This disclaimer of warranty constitutes an *
|
||||||
|
* essential part of this License. No use of any Covered Software is *
|
||||||
|
* authorized under this License except under this disclaimer. *
|
||||||
|
* *
|
||||||
|
************************************************************************
|
||||||
|
|
||||||
|
************************************************************************
|
||||||
|
* *
|
||||||
|
* 7. Limitation of Liability *
|
||||||
|
* -------------------------- *
|
||||||
|
* *
|
||||||
|
* Under no circumstances and under no legal theory, whether tort *
|
||||||
|
* (including negligence), contract, or otherwise, shall any *
|
||||||
|
* Contributor, or anyone who distributes Covered Software as *
|
||||||
|
* permitted above, be liable to You for any direct, indirect, *
|
||||||
|
* special, incidental, or consequential damages of any character *
|
||||||
|
* including, without limitation, damages for lost profits, loss of *
|
||||||
|
* goodwill, work stoppage, computer failure or malfunction, or any *
|
||||||
|
* and all other commercial damages or losses, even if such party *
|
||||||
|
* shall have been informed of the possibility of such damages. This *
|
||||||
|
* limitation of liability shall not apply to liability for death or *
|
||||||
|
* personal injury resulting from such party's negligence to the *
|
||||||
|
* extent applicable law prohibits such limitation. Some *
|
||||||
|
* jurisdictions do not allow the exclusion or limitation of *
|
||||||
|
* incidental or consequential damages, so this exclusion and *
|
||||||
|
* limitation may not apply to You. *
|
||||||
|
* *
|
||||||
|
************************************************************************
|
||||||
|
|
||||||
|
8. Litigation
|
||||||
|
-------------
|
||||||
|
|
||||||
|
Any litigation relating to this License may be brought only in the
|
||||||
|
courts of a jurisdiction where the defendant maintains its principal
|
||||||
|
place of business and such litigation shall be governed by laws of that
|
||||||
|
jurisdiction, without reference to its conflict-of-law provisions.
|
||||||
|
Nothing in this Section shall prevent a party's ability to bring
|
||||||
|
cross-claims or counter-claims.
|
||||||
|
|
||||||
|
9. Miscellaneous
|
||||||
|
----------------
|
||||||
|
|
||||||
|
This License represents the complete agreement concerning the subject
|
||||||
|
matter hereof. If any provision of this License is held to be
|
||||||
|
unenforceable, such provision shall be reformed only to the extent
|
||||||
|
necessary to make it enforceable. Any law or regulation which provides
|
||||||
|
that the language of a contract shall be construed against the drafter
|
||||||
|
shall not be used to construe this License against a Contributor.
|
||||||
|
|
||||||
|
10. Versions of the License
|
||||||
|
---------------------------
|
||||||
|
|
||||||
|
10.1. New Versions
|
||||||
|
|
||||||
|
Mozilla Foundation is the license steward. Except as provided in Section
|
||||||
|
10.3, no one other than the license steward has the right to modify or
|
||||||
|
publish new versions of this License. Each version will be given a
|
||||||
|
distinguishing version number.
|
||||||
|
|
||||||
|
10.2. Effect of New Versions
|
||||||
|
|
||||||
|
You may distribute the Covered Software under the terms of the version
|
||||||
|
of the License under which You originally received the Covered Software,
|
||||||
|
or under the terms of any subsequent version published by the license
|
||||||
|
steward.
|
||||||
|
|
||||||
|
10.3. Modified Versions
|
||||||
|
|
||||||
|
If you create software not governed by this License, and you want to
|
||||||
|
create a new license for such software, you may create and use a
|
||||||
|
modified version of this License if you rename the license and remove
|
||||||
|
any references to the name of the license steward (except to note that
|
||||||
|
such modified license differs from this License).
|
||||||
|
|
||||||
|
10.4. Distributing Source Code Form that is Incompatible With Secondary
|
||||||
|
Licenses
|
||||||
|
|
||||||
|
If You choose to distribute Source Code Form that is Incompatible With
|
||||||
|
Secondary Licenses under the terms of this version of the License, the
|
||||||
|
notice described in Exhibit B of this License must be attached.
|
||||||
|
|
||||||
|
Exhibit A - Source Code Form License Notice
|
||||||
|
-------------------------------------------
|
||||||
|
|
||||||
|
This Source Code Form is subject to the terms of the Mozilla Public
|
||||||
|
License, v. 2.0. If a copy of the MPL was not distributed with this
|
||||||
|
file, You can obtain one at http://mozilla.org/MPL/2.0/.
|
||||||
|
|
||||||
|
If it is not possible or desirable to put the notice in a particular
|
||||||
|
file, then You may include the notice in a location (such as a LICENSE
|
||||||
|
file in a relevant directory) where a recipient would be likely to look
|
||||||
|
for such a notice.
|
||||||
|
|
||||||
|
You may add additional accurate notices of copyright ownership.
|
||||||
|
|
||||||
|
Exhibit B - "Incompatible With Secondary Licenses" Notice
|
||||||
|
---------------------------------------------------------
|
||||||
|
|
||||||
|
This Source Code Form is "Incompatible With Secondary Licenses", as
|
||||||
|
defined by the Mozilla Public License, v. 2.0.
|
||||||
Binary file not shown.
25
create_nginx_cert.sh
Normal file
25
create_nginx_cert.sh
Normal file
|
|
@ -0,0 +1,25 @@
|
||||||
|
# Erzeugt das Zertifikat neu und fügt alle drei Namen als gültige DNS-Ziele hinzu
|
||||||
|
#openssl req -x509 -nodes -days 3650 -newkey rsa:2048 \
|
||||||
|
# -keyout nginx_ssl/nginx.key -out nginx_ssl/nginx.crt \
|
||||||
|
# -subj "/CN=registry.local" \
|
||||||
|
# -addext "subjectAltName = DNS:registry.local,DNS:nginx,DNS:localhost"
|
||||||
|
|
||||||
|
openssl req -x509 -nodes -days 3650 -newkey rsa:2048 \
|
||||||
|
-keyout nginx_ssl/nginx.key -out nginx_ssl/nginx.crt \
|
||||||
|
-config openssl.cnf
|
||||||
|
|
||||||
|
|
||||||
|
#sudo mkdir -p /etc/docker/certs.d/nginx:3000/
|
||||||
|
#sudo cp nginx_ssl/nginx.crt /etc/docker/certs.d/nginx:3000/ca.crt
|
||||||
|
#sudo /etc/init.d/docker restart
|
||||||
|
|
||||||
|
# 1. Für den K3s-Zertifikatsordner (wird via Compose-Volume reingemappt)
|
||||||
|
# Die Datei liegt direkt unter ./nginx_ssl/nginx.crt, welche K3s bereits liest!
|
||||||
|
|
||||||
|
# 2. Für den Docker-Daemon des Hosts (falls die Pipeline noch mal dorthin funkt)
|
||||||
|
sudo mkdir -p /etc/docker/certs.d/registry.local:3000/
|
||||||
|
sudo cp nginx_ssl/nginx.crt /etc/docker/certs.d/registry.local:3000/ca.crt
|
||||||
|
|
||||||
|
# 3. Nginx und K3s neu starten, damit sie das frische Zertifikat laden
|
||||||
|
docker compose up -d --force-recreate nginx k3s-cluster
|
||||||
|
|
||||||
100
docker-compose.yml
Normal file
100
docker-compose.yml
Normal file
|
|
@ -0,0 +1,100 @@
|
||||||
|
networks:
|
||||||
|
test-net:
|
||||||
|
name: gitops-test-network
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
forgejo-data:
|
||||||
|
driver: local
|
||||||
|
driver_opts:
|
||||||
|
type: none
|
||||||
|
o: bind
|
||||||
|
device: ${PWD}/forgejo_data
|
||||||
|
runner-data:
|
||||||
|
driver: local
|
||||||
|
driver_opts:
|
||||||
|
type: none
|
||||||
|
o: bind
|
||||||
|
device: ${PWD}/runner_data
|
||||||
|
|
||||||
|
services:
|
||||||
|
# 1. FORGEJO
|
||||||
|
forgejo:
|
||||||
|
image: data.forgejo.org/forgejo/forgejo:9
|
||||||
|
container_name: forgejo
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
environment:
|
||||||
|
- FORGEJO__SERVER__HTTP_PORT=3000
|
||||||
|
- FORGEJO__SERVER__ROOT_URL=http://forgejo:3000
|
||||||
|
- FORGEJO__ACTIONS__ENABLED=true
|
||||||
|
- FORGEJO__PACKAGES__ENABLED=true
|
||||||
|
- FORGEJO__PACKAGES__CONTAINER_ENABLED=true
|
||||||
|
volumes:
|
||||||
|
- forgejo-data:/data
|
||||||
|
restart: always
|
||||||
|
|
||||||
|
# 2. NGINX REVERSE PROXY
|
||||||
|
nginx:
|
||||||
|
image: nginx:alpine
|
||||||
|
container_name: nginx-proxy
|
||||||
|
networks:
|
||||||
|
test-net:
|
||||||
|
aliases:
|
||||||
|
- registry.local
|
||||||
|
ports:
|
||||||
|
- "3005:443"
|
||||||
|
- "3000:80"
|
||||||
|
volumes:
|
||||||
|
- ./nginx.conf:/etc/nginx/nginx.conf:ro
|
||||||
|
- ./nginx_ssl:/etc/nginx/ssl:ro
|
||||||
|
restart: always
|
||||||
|
|
||||||
|
# 3. FORGEJO RUNNER
|
||||||
|
forgejo-runner:
|
||||||
|
image: data.forgejo.org/forgejo/runner:9
|
||||||
|
container_name: forgejo-runner
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
user: "0:0"
|
||||||
|
entrypoint: ["/bin/sh", "-c"]
|
||||||
|
command: ["forgejo-runner daemon --config /data/runner-config.yml"]
|
||||||
|
environment:
|
||||||
|
- GITEA_INSTANCE_URL=http://forgejo:3000
|
||||||
|
- GITEA_REGISTRATION_TOKEN=z6xlwg3dSRYZ59zUxfrztDJasG6VkvulFyTwtJQS
|
||||||
|
- GITEA_RUNNER_NAME=debian-local-runner
|
||||||
|
- GITEA_RUNNER_LABELS=ubuntu-latest:docker://docker:24-cli,debian-stable:docker://docker:24-cli
|
||||||
|
volumes:
|
||||||
|
- /var/run/docker.sock:/var/run/docker.sock
|
||||||
|
- runner-data:/data
|
||||||
|
- ./runner-config.yaml:/data/runner-config.yml
|
||||||
|
- ./kind_kubeconfig:/root/.kube
|
||||||
|
depends_on:
|
||||||
|
- forgejo
|
||||||
|
- nginx
|
||||||
|
restart: always
|
||||||
|
|
||||||
|
|
||||||
|
# 4. KUBERNETES PLATFORM (K3s: Validiert die CA jetzt echt und regelkonform)
|
||||||
|
k3s-cluster:
|
||||||
|
image: rancher/k3s:v1.28.2-k3s1
|
||||||
|
container_name: local-k3s-platform
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
privileged: true
|
||||||
|
tmpfs:
|
||||||
|
- /run
|
||||||
|
- /var/run
|
||||||
|
ports:
|
||||||
|
- "8443:6443"
|
||||||
|
- "8080:80"
|
||||||
|
environment:
|
||||||
|
- K3S_KUBECONFIG_OUTPUT=/output/config
|
||||||
|
- K3S_KUBECONFIG_MODE=666
|
||||||
|
volumes:
|
||||||
|
- ./kind_kubeconfig:/output
|
||||||
|
# Reicht das CA-Zertifikat an den von containerd gesuchten Standardpfad durch
|
||||||
|
- ./nginx_ssl/nginx.crt:/etc/containerd/certs.d/registry.local/ca.crt:ro
|
||||||
|
# DIE RETTUNG: Zwingt die Engine, das obige CA-File für registry.local zur echten Validierung zu nutzen!
|
||||||
|
- ./registries.yaml:/etc/rancher/k3s/registries.yaml:ro
|
||||||
|
command: server --disable traefik --egress-selector-mode=disabled
|
||||||
|
restart: always
|
||||||
82
docker-compose.yml.lastnotworkingcgroupkind
Normal file
82
docker-compose.yml.lastnotworkingcgroupkind
Normal file
|
|
@ -0,0 +1,82 @@
|
||||||
|
networks:
|
||||||
|
test-net:
|
||||||
|
driver: bridge
|
||||||
|
name: gitops-test-network
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
forgejo-data:
|
||||||
|
driver: local
|
||||||
|
driver_opts:
|
||||||
|
type: none
|
||||||
|
o: bind
|
||||||
|
device: ${PWD}/forgejo_data
|
||||||
|
runner-data:
|
||||||
|
driver: local
|
||||||
|
driver_opts:
|
||||||
|
type: none
|
||||||
|
o: bind
|
||||||
|
device: ${PWD}/runner_data
|
||||||
|
|
||||||
|
services:
|
||||||
|
# 1. FORGEJO
|
||||||
|
forgejo:
|
||||||
|
image: data.forgejo.org/forgejo/forgejo:9
|
||||||
|
container_name: forgejo
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
environment:
|
||||||
|
- FORGEJO__SERVER__HTTP_PORT=3000
|
||||||
|
- FORGEJO__SERVER__ROOT_URL=http://localhost:3000
|
||||||
|
- FORGEJO__ACTIONS__ENABLED=true
|
||||||
|
- FORGEJO__PACKAGES__ENABLED=true
|
||||||
|
- FORGEJO__PACKAGES__CONTAINER_ENABLED=true
|
||||||
|
ports:
|
||||||
|
- "3000:3000"
|
||||||
|
- "3005:3000"
|
||||||
|
- "2222:22"
|
||||||
|
volumes:
|
||||||
|
- forgejo-data:/data
|
||||||
|
restart: always
|
||||||
|
|
||||||
|
# 2. FORGEJO RUNNER
|
||||||
|
forgejo-runner:
|
||||||
|
image: data.forgejo.org/forgejo/runner:9
|
||||||
|
container_name: forgejo-runner
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
user: "0:0"
|
||||||
|
entrypoint: ["/bin/sh", "-c"]
|
||||||
|
command: ["forgejo-runner daemon"]
|
||||||
|
environment:
|
||||||
|
- GITEA_INSTANCE_URL=http://forgejo:3000
|
||||||
|
- GITEA_RUNNER_REGISTRATION_TOKEN=z6xlwg3dSRYZ59zUxfrztDJasG6VkvulFyTwtJQS
|
||||||
|
- GITEA_RUNNER_NAME=debian-local-runner
|
||||||
|
- GITEA_RUNNER_LABELS=ubuntu-latest:docker://debian:stable-slim,debian-stable:docker://debian:stable-slim
|
||||||
|
volumes:
|
||||||
|
- /var/run/docker.sock:/var/run/docker.sock
|
||||||
|
- runner-data:/data
|
||||||
|
depends_on:
|
||||||
|
- forgejo
|
||||||
|
restart: always
|
||||||
|
|
||||||
|
# 3. KUBERNETES INITIALIZER (YAML-Syntax korrigiert)
|
||||||
|
kind-cluster:
|
||||||
|
image: alpine:latest
|
||||||
|
container_name: kind-initializer
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
volumes:
|
||||||
|
- /var/run/docker.sock:/var/run/docker.sock
|
||||||
|
- ./kind_kubeconfig:/output_kubeconfig
|
||||||
|
entrypoint: >
|
||||||
|
sh -c "apk add --no-cache wget docker-cli ca-certificates;
|
||||||
|
update-ca-certificates;
|
||||||
|
wget -q --show-progress https://github.com/kubernetes-sigs/kind/releases/download/v0.24.0/kind-linux-amd64 -O /usr/local/bin/kind;
|
||||||
|
chmod +x /usr/local/bin/kind;
|
||||||
|
if ! /usr/local/bin/kind get clusters 2>/dev/null | grep -q gitops-test; then
|
||||||
|
# Wir schreiben die Config direkt im Befehl, um den elogind/cgroup-Fehler zu umgehen
|
||||||
|
printf 'kind: Cluster\napiVersion: kind.x-k8s.io/v1alpha4\nnetworking:\n kubeProxyMode: \"iptables\"\n' | /usr/local/bin/kind create cluster --name gitops-test --image kindest/node:v1.28.0 --config=-;
|
||||||
|
fi;
|
||||||
|
/usr/local/bin/kind get kubeconfig --name gitops-test > /output_kubeconfig/config;
|
||||||
|
tail -f /dev/null"
|
||||||
|
restart: always
|
||||||
80
docker-compose.yml.old10
Normal file
80
docker-compose.yml.old10
Normal file
|
|
@ -0,0 +1,80 @@
|
||||||
|
networks:
|
||||||
|
test-net:
|
||||||
|
driver: bridge
|
||||||
|
name: gitops-test-network
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
forgejo-data:
|
||||||
|
driver: local
|
||||||
|
driver_opts:
|
||||||
|
type: none
|
||||||
|
o: bind
|
||||||
|
device: ${PWD}/forgejo_data
|
||||||
|
runner-data:
|
||||||
|
driver: local
|
||||||
|
driver_opts:
|
||||||
|
type: none
|
||||||
|
o: bind
|
||||||
|
device: ${PWD}/runner_data
|
||||||
|
|
||||||
|
services:
|
||||||
|
# 1. FORGEJO
|
||||||
|
forgejo:
|
||||||
|
image: data.forgejo.org/forgejo/forgejo:9
|
||||||
|
container_name: forgejo
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
environment:
|
||||||
|
- FORGEJO__SERVER__HTTP_PORT=3000
|
||||||
|
- FORGEJO__SERVER__ROOT_URL=http://localhost:3000
|
||||||
|
- FORGEJO__ACTIONS__ENABLED=true
|
||||||
|
- FORGEJO__PACKAGES__ENABLED=true
|
||||||
|
- FORGEJO__PACKAGES__CONTAINER_ENABLED=true
|
||||||
|
ports:
|
||||||
|
- "3000:3000"
|
||||||
|
- "3005:3000"
|
||||||
|
- "2222:22"
|
||||||
|
volumes:
|
||||||
|
- forgejo-data:/data
|
||||||
|
restart: always
|
||||||
|
|
||||||
|
# 2. FORGEJO RUNNER (KORRIGIERT: Läuft als root, um Docker-Socket-Rechte zu bekommen)
|
||||||
|
forgejo-runner:
|
||||||
|
image: data.forgejo.org/forgejo/runner:9
|
||||||
|
container_name: forgejo-runner
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
user: "0:0" # <--- WICHTIG: Behebt den "permission denied" Fehler am Docker-Socket
|
||||||
|
entrypoint: ["/bin/sh", "-c"]
|
||||||
|
command: ["forgejo-runner daemon"]
|
||||||
|
environment:
|
||||||
|
- GITEA_INSTANCE_URL=http://forgejo:3000
|
||||||
|
- GITEA_RUNNER_REGISTRATION_TOKEN=z6xlwg3dSRYZ59zUxfrztDJasG6VkvulFyTwtJQS
|
||||||
|
- GITEA_RUNNER_NAME=debian-local-runner
|
||||||
|
- GITEA_RUNNER_LABELS=ubuntu-latest:docker://node:20-bullseye,debian-stable:docker://debian:stable-slim
|
||||||
|
volumes:
|
||||||
|
- /var/run/docker.sock:/var/run/docker.sock
|
||||||
|
- runner-data:/data
|
||||||
|
depends_on:
|
||||||
|
- forgejo
|
||||||
|
restart: always
|
||||||
|
|
||||||
|
# 3. KUBERNETES INITIALIZER (KORRIGIERT: Bombensicherer Download via wget)
|
||||||
|
kind-cluster:
|
||||||
|
image: alpine:latest
|
||||||
|
container_name: gitops-test-control-plane
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
volumes:
|
||||||
|
- /var/run/docker.sock:/var/run/docker.sock
|
||||||
|
- ./kind_kubeconfig:/output_kubeconfig
|
||||||
|
entrypoint: >
|
||||||
|
sh -c "apk add --no-cache wget docker-cli;
|
||||||
|
wget -q --show-progress https://k8s.io -O /usr/local/bin/kind;
|
||||||
|
chmod +x /usr/local/bin/kind;
|
||||||
|
if ! /usr/local/bin/kind get clusters 2>/dev/null | grep -q gitops-test; then
|
||||||
|
/usr/local/bin/kind create cluster --name gitops-test --image kindest/node:v1.28.0;
|
||||||
|
fi;
|
||||||
|
/usr/local/bin/kind get kubeconfig --name gitops-test > /output_kubeconfig/config;
|
||||||
|
tail -f /dev/null"
|
||||||
|
restart: always
|
||||||
82
docker-compose.yml.old11
Normal file
82
docker-compose.yml.old11
Normal file
|
|
@ -0,0 +1,82 @@
|
||||||
|
networks:
|
||||||
|
test-net:
|
||||||
|
driver: bridge
|
||||||
|
name: gitops-test-network
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
forgejo-data:
|
||||||
|
driver: local
|
||||||
|
driver_opts:
|
||||||
|
type: none
|
||||||
|
o: bind
|
||||||
|
device: ${PWD}/forgejo_data
|
||||||
|
runner-data:
|
||||||
|
driver: local
|
||||||
|
driver_opts:
|
||||||
|
type: none
|
||||||
|
o: bind
|
||||||
|
device: ${PWD}/runner_data
|
||||||
|
|
||||||
|
services:
|
||||||
|
# 1. FORGEJO
|
||||||
|
forgejo:
|
||||||
|
image: data.forgejo.org/forgejo/forgejo:9
|
||||||
|
container_name: forgejo
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
environment:
|
||||||
|
- FORGEJO__SERVER__HTTP_PORT=3000
|
||||||
|
- FORGEJO__SERVER__ROOT_URL=http://localhost:3000
|
||||||
|
- FORGEJO__ACTIONS__ENABLED=true
|
||||||
|
- FORGEJO__PACKAGES__ENABLED=true
|
||||||
|
- FORGEJO__PACKAGES__CONTAINER_ENABLED=true
|
||||||
|
ports:
|
||||||
|
- "3000:3000"
|
||||||
|
- "3005:3000"
|
||||||
|
- "2222:22"
|
||||||
|
volumes:
|
||||||
|
- forgejo-data:/data
|
||||||
|
restart: always
|
||||||
|
|
||||||
|
# 2. FORGEJO RUNNER (KORRIGIERT: Läuft als root, um Docker-Socket-Rechte zu bekommen)
|
||||||
|
forgejo-runner:
|
||||||
|
image: data.forgejo.org/forgejo/runner:9
|
||||||
|
container_name: forgejo-runner
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
user: "0:0" # <--- WICHTIG: Behebt den "permission denied" Fehler am Docker-Socket
|
||||||
|
entrypoint: ["/bin/sh", "-c"]
|
||||||
|
command: ["forgejo-runner daemon"]
|
||||||
|
environment:
|
||||||
|
- GITEA_INSTANCE_URL=http://forgejo:3000
|
||||||
|
- GITEA_RUNNER_REGISTRATION_TOKEN=z6xlwg3dSRYZ59zUxfrztDJasG6VkvulFyTwtJQS
|
||||||
|
- GITEA_RUNNER_NAME=debian-local-runner
|
||||||
|
- GITEA_RUNNER_LABELS=ubuntu-latest:docker://node:20-bullseye,debian-stable:docker://debian:stable-slim
|
||||||
|
volumes:
|
||||||
|
- /var/run/docker.sock:/var/run/docker.sock
|
||||||
|
- runner-data:/data
|
||||||
|
depends_on:
|
||||||
|
- forgejo
|
||||||
|
restart: always
|
||||||
|
|
||||||
|
# 3. KUBERNETES INITIALIZER (KORRIGIERT: Erzwingt den echten Binary-Download via GitHub Release)
|
||||||
|
kind-cluster:
|
||||||
|
image: alpine:latest
|
||||||
|
container_name: gitops-test-control-plane
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
volumes:
|
||||||
|
- /var/run/docker.sock:/var/run/docker.sock
|
||||||
|
- ./kind_kubeconfig:/output_kubeconfig
|
||||||
|
entrypoint: >
|
||||||
|
sh -c "apk add --no-cache wget docker-cli ca-certificates;
|
||||||
|
update-ca-certificates;
|
||||||
|
wget --no-check-certificate https://github.com -O /usr/local/bin/kind;
|
||||||
|
chmod +x /usr/local/bin/kind;
|
||||||
|
if ! /usr/local/bin/kind get clusters 2>/dev/null | grep -q gitops-test; then
|
||||||
|
/usr/local/bin/kind create cluster --name gitops-test --image kindest/node:v1.28.0;
|
||||||
|
fi;
|
||||||
|
/usr/local/bin/kind get kubeconfig --name gitops-test > /output_kubeconfig/config;
|
||||||
|
tail -f /dev/null"
|
||||||
|
restart: always
|
||||||
|
|
||||||
88
docker-compose.yml.old12
Normal file
88
docker-compose.yml.old12
Normal file
|
|
@ -0,0 +1,88 @@
|
||||||
|
networks:
|
||||||
|
test-net:
|
||||||
|
driver: bridge
|
||||||
|
name: gitops-test-network
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
forgejo-data:
|
||||||
|
driver: local
|
||||||
|
driver_opts:
|
||||||
|
type: none
|
||||||
|
o: bind
|
||||||
|
device: ${PWD}/forgejo_data
|
||||||
|
runner-data:
|
||||||
|
driver: local
|
||||||
|
driver_opts:
|
||||||
|
type: none
|
||||||
|
o: bind
|
||||||
|
device: ${PWD}/runner_data
|
||||||
|
|
||||||
|
services:
|
||||||
|
# 1. FORGEJO
|
||||||
|
forgejo:
|
||||||
|
image: data.forgejo.org/forgejo/forgejo:9
|
||||||
|
container_name: forgejo
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
environment:
|
||||||
|
- FORGEJO__SERVER__HTTP_PORT=3000
|
||||||
|
- FORGEJO__SERVER__ROOT_URL=http://localhost:3000
|
||||||
|
- FORGEJO__ACTIONS__ENABLED=true
|
||||||
|
- FORGEJO__PACKAGES__ENABLED=true
|
||||||
|
- FORGEJO__PACKAGES__CONTAINER_ENABLED=true
|
||||||
|
ports:
|
||||||
|
- "3000:3000"
|
||||||
|
- "3005:3000"
|
||||||
|
- "2222:22"
|
||||||
|
volumes:
|
||||||
|
- forgejo-data:/data
|
||||||
|
restart: always
|
||||||
|
|
||||||
|
# 2. FORGEJO RUNNER
|
||||||
|
forgejo-runner:
|
||||||
|
image: data.forgejo.org/forgejo/runner:9
|
||||||
|
container_name: forgejo-runner
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
user: "0:0"
|
||||||
|
entrypoint: ["/bin/sh", "-c"]
|
||||||
|
command: ["forgejo-runner daemon"]
|
||||||
|
environment:
|
||||||
|
- GITEA_INSTANCE_URL=http://forgejo:3000
|
||||||
|
- GITEA_RUNNER_REGISTRATION_TOKEN=z6xlwg3dSRYZ59zUxfrztDJasG6VkvulFyTwtJQS
|
||||||
|
- GITEA_RUNNER_NAME=debian-local-runner
|
||||||
|
- GITEA_RUNNER_LABELS=ubuntu-latest:docker://debian:stable-slim,debian-stable:docker://debian:stable-slim
|
||||||
|
volumes:
|
||||||
|
- /var/run/docker.sock:/var/run/docker.sock
|
||||||
|
- runner-data:/data
|
||||||
|
depends_on:
|
||||||
|
- forgejo
|
||||||
|
restart: always
|
||||||
|
|
||||||
|
# 3. KUBERNETES INITIALIZER (KORRIGIERT: Cgroup-Kompatibilität für Devuan/elogind)
|
||||||
|
kind-cluster:
|
||||||
|
image: alpine:latest
|
||||||
|
container_name: kind-initializer
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
volumes:
|
||||||
|
- /var/run/docker.sock:/var/run/docker.sock
|
||||||
|
- /sys/fs/cgroup:/sys/fs/cgroup:ro # Reicht die Host-Cgroups schreibgeschützt durch
|
||||||
|
- ./kind_kubeconfig:/output_kubeconfig
|
||||||
|
entrypoint: >
|
||||||
|
sh -c "apk add --no-cache wget docker-cli ca-certificates;
|
||||||
|
update-ca-certificates;
|
||||||
|
wget -q --show-progress https://github.com -O /usr/local/bin/kind;
|
||||||
|
chmod +x /usr/local/bin/kind;
|
||||||
|
if ! /usr/local/bin/kind get clusters 2>/dev/null | grep -q gitops-test; then
|
||||||
|
# HIER: Wir erzwingen die Host-Cgroup-Namespaces für systemd-freie Systeme
|
||||||
|
/usr/local/bin/kind create cluster --name gitops-test --image kindest/node:v1.28.0 --kubeadm-config=/dev/stdin <<EOF
|
||||||
|
kind: Cluster
|
||||||
|
apiVersion: kind.x-k8s.io/v1alpha4
|
||||||
|
networking:
|
||||||
|
kubeProxyMode: "iptables"
|
||||||
|
EOF
|
||||||
|
fi;
|
||||||
|
/usr/local/bin/kind get kubeconfig --name gitops-test > /output_kubeconfig/config;
|
||||||
|
tail -f /dev/null"
|
||||||
|
restart: always
|
||||||
82
docker-compose.yml.old13
Normal file
82
docker-compose.yml.old13
Normal file
|
|
@ -0,0 +1,82 @@
|
||||||
|
networks:
|
||||||
|
test-net:
|
||||||
|
driver: bridge
|
||||||
|
name: gitops-test-network
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
forgejo-data:
|
||||||
|
driver: local
|
||||||
|
driver_opts:
|
||||||
|
type: none
|
||||||
|
o: bind
|
||||||
|
device: ${PWD}/forgejo_data
|
||||||
|
runner-data:
|
||||||
|
driver: local
|
||||||
|
driver_opts:
|
||||||
|
type: none
|
||||||
|
o: bind
|
||||||
|
device: ${PWD}/runner_data
|
||||||
|
|
||||||
|
services:
|
||||||
|
# 1. FORGEJO (Git Server + Registry)
|
||||||
|
forgejo:
|
||||||
|
image: data.forgejo.org/forgejo/forgejo:9
|
||||||
|
container_name: forgejo
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
environment:
|
||||||
|
- FORGEJO__SERVER__HTTP_PORT=3000
|
||||||
|
- FORGEJO__SERVER__ROOT_URL=http://localhost:3000
|
||||||
|
- FORGEJO__ACTIONS__ENABLED=true
|
||||||
|
- FORGEJO__PACKAGES__ENABLED=true
|
||||||
|
- FORGEJO__PACKAGES__CONTAINER_ENABLED=true
|
||||||
|
ports:
|
||||||
|
- "3000:3000"
|
||||||
|
- "3005:3000"
|
||||||
|
- "2222:22"
|
||||||
|
volumes:
|
||||||
|
- forgejo-data:/data
|
||||||
|
restart: always
|
||||||
|
|
||||||
|
# 2. FORGEJO RUNNER (Pipeline-Ausführung)
|
||||||
|
forgejo-runner:
|
||||||
|
image: data.forgejo.org/forgejo/runner:9
|
||||||
|
container_name: forgejo-runner
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
user: "0:0"
|
||||||
|
entrypoint: ["/bin/sh", "-c"]
|
||||||
|
command: ["forgejo-runner daemon"]
|
||||||
|
environment:
|
||||||
|
- GITEA_INSTANCE_URL=http://forgejo:3000
|
||||||
|
- GITEA_RUNNER_REGISTRATION_TOKEN=z6xlwg3dSRYZ59zUxfrztDJasG6VkvulFyTwtJQS
|
||||||
|
- GITEA_RUNNER_NAME=debian-local-runner
|
||||||
|
- GITEA_RUNNER_LABELS=ubuntu-latest:docker://debian:stable-slim,debian-stable:docker://debian:stable-slim
|
||||||
|
volumes:
|
||||||
|
- /var/run/docker.sock:/var/run/docker.sock
|
||||||
|
- runner-data:/data
|
||||||
|
- ./kind_kubeconfig:/root/.kube # Reicht die K3s-Config an Terraform weiter
|
||||||
|
depends_on:
|
||||||
|
- forgejo
|
||||||
|
restart: always
|
||||||
|
|
||||||
|
# 3. KUBERNETES PLATTFORM (K3s: Voll kompatibel mit Devuan/elogind)
|
||||||
|
k3s-cluster:
|
||||||
|
image: rancher/k3s:v1.28.2-k3s1
|
||||||
|
container_name: local-k3s-platform
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
privileged: true
|
||||||
|
tmpfs:
|
||||||
|
- /run
|
||||||
|
- /var/run
|
||||||
|
ports:
|
||||||
|
- "8443:6443" # Kubernetes-API für dein lokales Terraform
|
||||||
|
- "8080:80" # Hierüber erreichst du deine Webapp-Updates von aussen
|
||||||
|
environment:
|
||||||
|
- K3S_KUBECONFIG_OUTPUT=/output/config
|
||||||
|
- K3S_KUBECONFIG_MODE=666
|
||||||
|
volumes:
|
||||||
|
- ./kind_kubeconfig:/output # Schreibt die Zugangsdaten direkt in dein Projektverzeichnis
|
||||||
|
command: server --disable traefik --egress-selector-mode=disabled
|
||||||
|
restart: always
|
||||||
85
docker-compose.yml.old14
Normal file
85
docker-compose.yml.old14
Normal file
|
|
@ -0,0 +1,85 @@
|
||||||
|
networks:
|
||||||
|
test-net:
|
||||||
|
driver: bridge
|
||||||
|
name: gitops-test-network
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
forgejo-data:
|
||||||
|
driver: local
|
||||||
|
driver_opts:
|
||||||
|
type: none
|
||||||
|
o: bind
|
||||||
|
device: ${PWD}/forgejo_data
|
||||||
|
runner-data:
|
||||||
|
driver: local
|
||||||
|
driver_opts:
|
||||||
|
type: none
|
||||||
|
o: bind
|
||||||
|
device: ${PWD}/runner_data
|
||||||
|
|
||||||
|
services:
|
||||||
|
# 1. FORGEJO
|
||||||
|
forgejo:
|
||||||
|
image: data.forgejo.org/forgejo/forgejo:9
|
||||||
|
container_name: forgejo
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
environment:
|
||||||
|
- FORGEJO__SERVER__HTTP_PORT=3000
|
||||||
|
- FORGEJO__SERVER__ROOT_URL=http://localhost:3000
|
||||||
|
- FORGEJO__ACTIONS__ENABLED=true
|
||||||
|
- FORGEJO__PACKAGES__ENABLED=true
|
||||||
|
- FORGEJO__PACKAGES__CONTAINER_ENABLED=true
|
||||||
|
ports:
|
||||||
|
- "3000:3000"
|
||||||
|
- "3005:3000"
|
||||||
|
- "2222:22"
|
||||||
|
volumes:
|
||||||
|
- forgejo-data:/data
|
||||||
|
restart: always
|
||||||
|
|
||||||
|
# 2. FORGEJO RUNNER (KORRIGIERT: Zwingt Pipeline-Container in das richtige Netzwerk)
|
||||||
|
forgejo-runner:
|
||||||
|
image: data.forgejo.org/forgejo/runner:9
|
||||||
|
container_name: forgejo-runner
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
user: "0:0"
|
||||||
|
entrypoint: ["/bin/sh", "-c"]
|
||||||
|
command: ["forgejo-runner daemon"]
|
||||||
|
environment:
|
||||||
|
- GITEA_INSTANCE_URL=http://forgejo:3000
|
||||||
|
- GITEA_RUNNER_REGISTRATION_TOKEN=z6xlwg3dSRYZ59zUxfrztDJasG6VkvulFyTwtJQS
|
||||||
|
- GITEA_RUNNER_NAME=debian-local-runner
|
||||||
|
- GITEA_RUNNER_LABELS=ubuntu-latest:docker://debian:stable-slim,debian-stable:docker://debian:stable-slim
|
||||||
|
# --- HIER IST DIE RETTUNG ---
|
||||||
|
# Erzwingt, dass alle vom Runner gestarteten Job-Container das Netzwerk teilen
|
||||||
|
- AM_CONTAINER_NETWORK=gitops-test-network
|
||||||
|
volumes:
|
||||||
|
- /var/run/docker.sock:/var/run/docker.sock
|
||||||
|
- runner-data:/data
|
||||||
|
- ./kind_kubeconfig:/root/.kube
|
||||||
|
depends_on:
|
||||||
|
- forgejo
|
||||||
|
restart: always
|
||||||
|
|
||||||
|
# 3. KUBERNETES PLATTFORM (K3s)
|
||||||
|
k3s-cluster:
|
||||||
|
image: rancher/k3s:v1.28.2-k3s1
|
||||||
|
container_name: local-k3s-platform
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
privileged: true
|
||||||
|
tmpfs:
|
||||||
|
- /run
|
||||||
|
- /var/run
|
||||||
|
ports:
|
||||||
|
- "8443:6443"
|
||||||
|
- "8080:80"
|
||||||
|
environment:
|
||||||
|
- K3S_KUBECONFIG_OUTPUT=/output/config
|
||||||
|
- K3S_KUBECONFIG_MODE=666
|
||||||
|
volumes:
|
||||||
|
- ./kind_kubeconfig:/output
|
||||||
|
command: server --disable traefik --egress-selector-mode=disabled
|
||||||
|
restart: always
|
||||||
84
docker-compose.yml.old15
Normal file
84
docker-compose.yml.old15
Normal file
|
|
@ -0,0 +1,84 @@
|
||||||
|
networks:
|
||||||
|
test-net:
|
||||||
|
driver: bridge
|
||||||
|
name: gitops-test-network
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
forgejo-data:
|
||||||
|
driver: local
|
||||||
|
driver_opts:
|
||||||
|
type: none
|
||||||
|
o: bind
|
||||||
|
device: ${PWD}/forgejo_data
|
||||||
|
runner-data:
|
||||||
|
driver: local
|
||||||
|
driver_opts:
|
||||||
|
type: none
|
||||||
|
o: bind
|
||||||
|
device: ${PWD}/runner_data
|
||||||
|
|
||||||
|
services:
|
||||||
|
# 1. FORGEJO
|
||||||
|
forgejo:
|
||||||
|
image: data.forgejo.org/forgejo/forgejo:9
|
||||||
|
container_name: forgejo
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
environment:
|
||||||
|
- FORGEJO__SERVER__HTTP_PORT=3000
|
||||||
|
- FORGEJO__SERVER__ROOT_URL=http://localhost:3000
|
||||||
|
- FORGEJO__ACTIONS__ENABLED=true
|
||||||
|
- FORGEJO__PACKAGES__ENABLED=true
|
||||||
|
- FORGEJO__PACKAGES__CONTAINER_ENABLED=true
|
||||||
|
ports:
|
||||||
|
- "3000:3000"
|
||||||
|
- "3005:3000"
|
||||||
|
- "2222:22"
|
||||||
|
volumes:
|
||||||
|
- forgejo-data:/data
|
||||||
|
restart: always
|
||||||
|
|
||||||
|
# 2. FORGEJO RUNNER (KORRIGIERT: Lädt die Netzwerkkonfiguration beim Start)
|
||||||
|
forgejo-runner:
|
||||||
|
image: data.forgejo.org/forgejo/runner:9
|
||||||
|
container_name: forgejo-runner
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
user: "0:0"
|
||||||
|
entrypoint: ["/bin/sh", "-c"]
|
||||||
|
# HIER: Wir hängen das --config Flag an den Daemon-Befehl an!
|
||||||
|
command: ["forgejo-runner daemon --config /data/runner-config.yml"]
|
||||||
|
environment:
|
||||||
|
- GITEA_INSTANCE_URL=http://localhost:3000 # Wechseln auf localhost, da network: host genutzt wird
|
||||||
|
- GITEA_RUNNER_REGISTRATION_TOKEN=z6xlwg3dSRYZ59zUxfrztDJasG6VkvulFyTwtJQS
|
||||||
|
- GITEA_RUNNER_NAME=debian-local-runner
|
||||||
|
- GITEA_RUNNER_LABELS=ubuntu-latest:docker://docker:24-cli,debian-stable:docker://docker:24-cli
|
||||||
|
volumes:
|
||||||
|
- /var/run/docker.sock:/var/run/docker.sock
|
||||||
|
- runner-data:/data
|
||||||
|
- ./runner-config.yaml:/data/runner-config.yml # <--- Reicht die Config-Datei hinein
|
||||||
|
- ./kind_kubeconfig:/root/.kube
|
||||||
|
depends_on:
|
||||||
|
- forgejo
|
||||||
|
restart: always
|
||||||
|
|
||||||
|
# 3. KUBERNETES PLATTFORM (K3s)
|
||||||
|
k3s-cluster:
|
||||||
|
image: rancher/k3s:v1.28.2-k3s1
|
||||||
|
container_name: local-k3s-platform
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
privileged: true
|
||||||
|
tmpfs:
|
||||||
|
- /run
|
||||||
|
- /var/run
|
||||||
|
ports:
|
||||||
|
- "8443:6443"
|
||||||
|
- "8080:80"
|
||||||
|
environment:
|
||||||
|
- K3S_KUBECONFIG_OUTPUT=/output/config
|
||||||
|
- K3S_KUBECONFIG_MODE=666
|
||||||
|
volumes:
|
||||||
|
- ./kind_kubeconfig:/output
|
||||||
|
command: server --disable traefik --egress-selector-mode=disabled
|
||||||
|
restart: always
|
||||||
85
docker-compose.yml.old16
Normal file
85
docker-compose.yml.old16
Normal file
|
|
@ -0,0 +1,85 @@
|
||||||
|
networks:
|
||||||
|
test-net:
|
||||||
|
driver: bridge
|
||||||
|
name: gitops-test-network
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
forgejo-data:
|
||||||
|
driver: local
|
||||||
|
driver_opts:
|
||||||
|
type: none
|
||||||
|
o: bind
|
||||||
|
device: ${PWD}/forgejo_data
|
||||||
|
runner-data:
|
||||||
|
driver: local
|
||||||
|
driver_opts:
|
||||||
|
type: none
|
||||||
|
o: bind
|
||||||
|
device: ${PWD}/runner_data
|
||||||
|
|
||||||
|
services:
|
||||||
|
# 1. FORGEJO
|
||||||
|
forgejo:
|
||||||
|
image: data.forgejo.org/forgejo/forgejo:9
|
||||||
|
container_name: forgejo
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
environment:
|
||||||
|
- FORGEJO__SERVER__HTTP_PORT=3000
|
||||||
|
- FORGEJO__SERVER__ROOT_URL=http://localhost:3000
|
||||||
|
- FORGEJO__ACTIONS__ENABLED=true
|
||||||
|
- FORGEJO__PACKAGES__ENABLED=true
|
||||||
|
- FORGEJO__PACKAGES__CONTAINER_ENABLED=true
|
||||||
|
ports:
|
||||||
|
- "3000:3000"
|
||||||
|
- "3005:3000"
|
||||||
|
- "2222:22"
|
||||||
|
volumes:
|
||||||
|
- forgejo-data:/data
|
||||||
|
restart: always
|
||||||
|
|
||||||
|
# 2. FORGEJO RUNNER (KORRIGIERT: Schlafmodus aktiv für die manuelle Registrierung)
|
||||||
|
forgejo-runner:
|
||||||
|
image: data.forgejo.org/forgejo/runner:9
|
||||||
|
container_name: forgejo-runner
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
user: "0:0"
|
||||||
|
entrypoint: ["/bin/sh", "-c"]
|
||||||
|
#command: ["tail -f /dev/null"] # <--- Zwingt den Container aktiv zu bleiben ohne Absturz!
|
||||||
|
command: ["forgejo-runner daemon --config /data/runner-config.yml"]
|
||||||
|
environment:
|
||||||
|
- GITEA_INSTANCE_URL=http://localhost:3000
|
||||||
|
- GITEA_RUNNER_REGISTRATION_TOKEN=juwV1ORFDdKzsazRavmsQ6BTdR0MRSDJJ6R1Maik
|
||||||
|
- GITEA_RUNNER_NAME=debian-local-runner
|
||||||
|
- GITEA_RUNNER_LABELS=ubuntu-latest:docker://docker:24-cli,debian-stable:docker://docker:24-cli
|
||||||
|
volumes:
|
||||||
|
- /var/run/docker.sock:/var/run/docker.sock
|
||||||
|
- runner-data:/data
|
||||||
|
- ./runner-config.yaml:/data/runner-config.yml
|
||||||
|
- ./kind_kubeconfig:/root/.kube
|
||||||
|
- /usr/local/bin/terraform:/usr/local/bin/terraform
|
||||||
|
depends_on:
|
||||||
|
- forgejo
|
||||||
|
restart: always
|
||||||
|
|
||||||
|
# 3. KUBERNETES PLATTFORM (K3s)
|
||||||
|
k3s-cluster:
|
||||||
|
image: rancher/k3s:v1.28.2-k3s1
|
||||||
|
container_name: local-k3s-platform
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
privileged: true
|
||||||
|
tmpfs:
|
||||||
|
- /run
|
||||||
|
- /var/run
|
||||||
|
ports:
|
||||||
|
- "8443:6443"
|
||||||
|
- "8080:80"
|
||||||
|
environment:
|
||||||
|
- K3S_KUBECONFIG_OUTPUT=/output/config
|
||||||
|
- K3S_KUBECONFIG_MODE=666
|
||||||
|
volumes:
|
||||||
|
- ./kind_kubeconfig:/output
|
||||||
|
command: server --disable traefik --egress-selector-mode=disabled
|
||||||
|
restart: always
|
||||||
84
docker-compose.yml.old16.autoregisteruseless
Normal file
84
docker-compose.yml.old16.autoregisteruseless
Normal file
|
|
@ -0,0 +1,84 @@
|
||||||
|
networks:
|
||||||
|
test-net:
|
||||||
|
driver: bridge
|
||||||
|
name: gitops-test-network
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
forgejo-data:
|
||||||
|
driver: local
|
||||||
|
driver_opts:
|
||||||
|
type: none
|
||||||
|
o: bind
|
||||||
|
device: ${PWD}/forgejo_data
|
||||||
|
runner-data:
|
||||||
|
driver: local
|
||||||
|
driver_opts:
|
||||||
|
type: none
|
||||||
|
o: bind
|
||||||
|
device: ${PWD}/runner_data
|
||||||
|
|
||||||
|
services:
|
||||||
|
# 1. FORGEJO
|
||||||
|
forgejo:
|
||||||
|
image: data.forgejo.org/forgejo/forgejo:9
|
||||||
|
container_name: forgejo
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
environment:
|
||||||
|
- FORGEJO__SERVER__HTTP_PORT=3000
|
||||||
|
- FORGEJO__SERVER__ROOT_URL=http://forgejo:3000 # <--- Einheitlich im Docker-Netzwerk
|
||||||
|
- FORGEJO__ACTIONS__ENABLED=true
|
||||||
|
- FORGEJO__PACKAGES__ENABLED=true
|
||||||
|
- FORGEJO__PACKAGES__CONTAINER_ENABLED=true
|
||||||
|
ports:
|
||||||
|
- "3000:3000"
|
||||||
|
- "3005:3000"
|
||||||
|
- "2222:22"
|
||||||
|
volumes:
|
||||||
|
- forgejo-data:/data
|
||||||
|
restart: always
|
||||||
|
|
||||||
|
# 2. FORGEJO RUNNER (KORRIGIERT: Vollautomatische Registrierung beim Booten)
|
||||||
|
forgejo-runner:
|
||||||
|
image: data.forgejo.org/forgejo/runner:9
|
||||||
|
container_name: forgejo-runner
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
user: "0:0"
|
||||||
|
# Der Trick: Er prüft, ob eine Config existiert. Wenn nicht, registriert er sich vollautomatisch selbst!
|
||||||
|
entrypoint: >
|
||||||
|
sh -c "if [ ! -f /data/.runner ]; then
|
||||||
|
forgejo-runner register --instance http://forgejo:3000 --token mysecrettoken123 --name debian-local-runner --labels ubuntu-latest:docker://ghcr.io/devops-infra/docker-terraform:latest --no-interactive;
|
||||||
|
fi;
|
||||||
|
exec forgejo-runner daemon"
|
||||||
|
environment:
|
||||||
|
- GITEA_INSTANCE_URL=http://forgejo:3000
|
||||||
|
- GITEA_RUNNER_REGISTRATION_TOKEN=mysecrettoken123 # <--- Wir fixieren das Token einfach!
|
||||||
|
volumes:
|
||||||
|
- /var/run/docker.sock:/var/run/docker.sock
|
||||||
|
- runner-data:/data
|
||||||
|
- ./kind_kubeconfig:/root/.kube
|
||||||
|
depends_on:
|
||||||
|
- forgejo
|
||||||
|
restart: always
|
||||||
|
|
||||||
|
# 3. KUBERNETES PLATTFORM (K3s)
|
||||||
|
k3s-cluster:
|
||||||
|
image: rancher/k3s:v1.28.2-k3s1
|
||||||
|
container_name: local-k3s-platform
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
privileged: true
|
||||||
|
tmpfs:
|
||||||
|
- /run
|
||||||
|
- /var/run
|
||||||
|
ports:
|
||||||
|
- "8443:6443"
|
||||||
|
- "8080:80"
|
||||||
|
environment:
|
||||||
|
- K3S_KUBECONFIG_OUTPUT=/output/config
|
||||||
|
- K3S_KUBECONFIG_MODE=666
|
||||||
|
volumes:
|
||||||
|
- ./kind_kubeconfig:/output
|
||||||
|
command: server --disable traefik --egress-selector-mode=disabled
|
||||||
|
restart: always
|
||||||
96
docker-compose.yml.old17
Normal file
96
docker-compose.yml.old17
Normal file
|
|
@ -0,0 +1,96 @@
|
||||||
|
networks:
|
||||||
|
test-net:
|
||||||
|
driver: bridge
|
||||||
|
name: gitops-test-network
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
forgejo-data:
|
||||||
|
driver: local
|
||||||
|
driver_opts:
|
||||||
|
type: none
|
||||||
|
o: bind
|
||||||
|
device: ${PWD}/forgejo_data
|
||||||
|
runner-data:
|
||||||
|
driver: local
|
||||||
|
driver_opts:
|
||||||
|
type: none
|
||||||
|
o: bind
|
||||||
|
device: ${PWD}/runner_data
|
||||||
|
|
||||||
|
services:
|
||||||
|
# 1. FORGEJO
|
||||||
|
forgejo:
|
||||||
|
image: data.forgejo.org/forgejo/forgejo:9
|
||||||
|
container_name: forgejo
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
environment:
|
||||||
|
- FORGEJO__SERVER__HTTP_PORT=3000
|
||||||
|
# WICHTIG: Die Root-URL zeigt nun auf das sichere HTTPS-Eingangstor von Caddy
|
||||||
|
- FORGEJO__SERVER__ROOT_URL=https://forgejo
|
||||||
|
- FORGEJO__ACTIONS__ENABLED=true
|
||||||
|
- FORGEJO__PACKAGES__ENABLED=true
|
||||||
|
- FORGEJO__PACKAGES__CONTAINER_ENABLED=true
|
||||||
|
volumes:
|
||||||
|
- forgejo-data:/data
|
||||||
|
restart: always
|
||||||
|
|
||||||
|
# 2. NGINX REVERSE PROXY (KORRIGIERT: Garantiert echtes, lokales SSL für Docker)
|
||||||
|
nginx:
|
||||||
|
image: nginx:alpine
|
||||||
|
container_name: nginx-proxy
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
ports:
|
||||||
|
- "3000:443"
|
||||||
|
volumes:
|
||||||
|
- ./nginx.conf:/etc/nginx/nginx.conf:ro
|
||||||
|
- ./nginx_ssl:/etc/nginx/ssl:ro
|
||||||
|
restart: always
|
||||||
|
|
||||||
|
|
||||||
|
# 3. FORGEJO RUNNER
|
||||||
|
forgejo-runner:
|
||||||
|
image: data.forgejo.org/forgejo/runner:9
|
||||||
|
container_name: forgejo-runner
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
user: "0:0"
|
||||||
|
entrypoint: ["/bin/sh", "-c"]
|
||||||
|
command: ["forgejo-runner daemon --config /data/runner-config.yml"]
|
||||||
|
environment:
|
||||||
|
# Greift nun verschlüsselt und absolut regelkonform über Caddy auf Forgejo zu
|
||||||
|
- GITEA_INSTANCE_URL=https://caddy
|
||||||
|
- GITEA_RUNNER_REGISTRATION_TOKEN=z6xlwg3dSRYZ59zUxfrztDJasG6VkvulFyTwtJQS
|
||||||
|
- GITEA_RUNNER_NAME=debian-local-runner
|
||||||
|
- GITEA_RUNNER_LABELS=ubuntu-latest:docker://docker:24-cli,debian-stable:docker://docker:24-cli
|
||||||
|
volumes:
|
||||||
|
- /var/run/docker.sock:/var/run/docker.sock
|
||||||
|
- runner-data:/data
|
||||||
|
- ./runner-config.yaml:/data/runner-config.yml
|
||||||
|
- ./kind_kubeconfig:/root/.kube
|
||||||
|
depends_on:
|
||||||
|
- forgejo
|
||||||
|
- caddy
|
||||||
|
restart: always
|
||||||
|
|
||||||
|
# 4. KUBERNETES PLATTFORM (K3s)
|
||||||
|
k3s-cluster:
|
||||||
|
image: rancher/k3s:v1.28.2-k3s1
|
||||||
|
container_name: local-k3s-platform
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
privileged: true
|
||||||
|
tmpfs:
|
||||||
|
- /run
|
||||||
|
- /var/run
|
||||||
|
ports:
|
||||||
|
- "8443:6443"
|
||||||
|
- "8080:80"
|
||||||
|
environment:
|
||||||
|
- K3S_KUBECONFIG_OUTPUT=/output/config
|
||||||
|
- K3S_KUBECONFIG_MODE=666
|
||||||
|
volumes:
|
||||||
|
- ./kind_kubeconfig:/output
|
||||||
|
command: server --disable traefik --egress-selector-mode=disabled
|
||||||
|
restart: always
|
||||||
93
docker-compose.yml.old18
Normal file
93
docker-compose.yml.old18
Normal file
|
|
@ -0,0 +1,93 @@
|
||||||
|
networks:
|
||||||
|
test-net:
|
||||||
|
driver: bridge
|
||||||
|
name: gitops-test-network
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
forgejo-data:
|
||||||
|
driver: local
|
||||||
|
driver_opts:
|
||||||
|
type: none
|
||||||
|
o: bind
|
||||||
|
device: ${PWD}/forgejo_data
|
||||||
|
runner-data:
|
||||||
|
driver: local
|
||||||
|
driver_opts:
|
||||||
|
type: none
|
||||||
|
o: bind
|
||||||
|
device: ${PWD}/runner_data
|
||||||
|
|
||||||
|
services:
|
||||||
|
# 1. FORGEJO
|
||||||
|
forgejo:
|
||||||
|
image: data.forgejo.org/forgejo/forgejo:9
|
||||||
|
container_name: forgejo
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
environment:
|
||||||
|
- FORGEJO__SERVER__HTTP_PORT=3000
|
||||||
|
- FORGEJO__SERVER__ROOT_URL=https://localhost:3000 # Zeigt nun auf das sichere Nginx-Tor
|
||||||
|
- FORGEJO__ACTIONS__ENABLED=true
|
||||||
|
- FORGEJO__PACKAGES__ENABLED=true
|
||||||
|
- FORGEJO__PACKAGES__CONTAINER_ENABLED=true
|
||||||
|
volumes:
|
||||||
|
- forgejo-data:/data
|
||||||
|
restart: always
|
||||||
|
|
||||||
|
# 2. NGINX REVERSE PROXY (Behebt die Docker SSL-Probleme)
|
||||||
|
nginx:
|
||||||
|
image: nginx:alpine
|
||||||
|
container_name: nginx-proxy
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
ports:
|
||||||
|
- "3000:443"
|
||||||
|
volumes:
|
||||||
|
- ./nginx.conf:/etc/nginx/nginx.conf:ro
|
||||||
|
- ./nginx_ssl:/etc/nginx/ssl:ro
|
||||||
|
restart: always
|
||||||
|
|
||||||
|
# 3. FORGEJO RUNNER (KORRIGIERT: Verweist nun sauber auf nginx statt caddy)
|
||||||
|
forgejo-runner:
|
||||||
|
image: data.forgejo.org/forgejo/runner:9
|
||||||
|
container_name: forgejo-runner
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
user: "0:0"
|
||||||
|
entrypoint: ["/bin/sh", "-c"]
|
||||||
|
command: ["forgejo-runner daemon --config /data/runner-config.yml"]
|
||||||
|
environment:
|
||||||
|
- GITEA_INSTANCE_URL=https://nginx # Geht verschlüsselt über Nginx zu Forgejo
|
||||||
|
- GITEA_RUNNER_REGISTRATION_TOKEN=z6xlwg3dSRYZ59zUxfrztDJasG6VkvulFyTwtJQS
|
||||||
|
- GITEA_RUNNER_NAME=debian-local-runner
|
||||||
|
- GITEA_RUNNER_LABELS=ubuntu-latest:docker://docker:24-cli,debian-stable:docker://docker:24-cli
|
||||||
|
volumes:
|
||||||
|
- /var/run/docker.sock:/var/run/docker.sock
|
||||||
|
- runner-data:/data
|
||||||
|
- ./runner-config.yaml:/data/runner-config.yml
|
||||||
|
- ./kind_kubeconfig:/root/.kube
|
||||||
|
depends_on:
|
||||||
|
- forgejo
|
||||||
|
- nginx # <--- KORRIGIERT: Hier stand vorher caddy!
|
||||||
|
restart: always
|
||||||
|
|
||||||
|
# 4. KUBERNETES PLATTFORM (K3s)
|
||||||
|
k3s-cluster:
|
||||||
|
image: rancher/k3s:v1.28.2-k3s1
|
||||||
|
container_name: local-k3s-platform
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
privileged: true
|
||||||
|
tmpfs:
|
||||||
|
- /run
|
||||||
|
- /var/run
|
||||||
|
ports:
|
||||||
|
- "8443:6443"
|
||||||
|
- "8080:80"
|
||||||
|
environment:
|
||||||
|
- K3S_KUBECONFIG_OUTPUT=/output/config
|
||||||
|
- K3S_KUBECONFIG_MODE=666
|
||||||
|
volumes:
|
||||||
|
- ./kind_kubeconfig:/output
|
||||||
|
command: server --disable traefik --egress-selector-mode=disabled
|
||||||
|
restart: always
|
||||||
95
docker-compose.yml.old19
Normal file
95
docker-compose.yml.old19
Normal file
|
|
@ -0,0 +1,95 @@
|
||||||
|
networks:
|
||||||
|
test-net:
|
||||||
|
driver: bridge
|
||||||
|
name: gitops-test-network
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
forgejo-data:
|
||||||
|
driver: local
|
||||||
|
driver_opts:
|
||||||
|
type: none
|
||||||
|
o: bind
|
||||||
|
device: ${PWD}/forgejo_data
|
||||||
|
runner-data:
|
||||||
|
driver: local
|
||||||
|
driver_opts:
|
||||||
|
type: none
|
||||||
|
o: bind
|
||||||
|
device: ${PWD}/runner_data
|
||||||
|
|
||||||
|
services:
|
||||||
|
# 1. FORGEJO (Git Server, Container Registry & Pipeline-Zentrale)
|
||||||
|
forgejo:
|
||||||
|
image: data.forgejo.org/forgejo/forgejo:9
|
||||||
|
container_name: forgejo
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
environment:
|
||||||
|
- FORGEJO__SERVER__HTTP_PORT=3000
|
||||||
|
- FORGEJO__SERVER__ROOT_URL=http://forgejo:3000 # Wichtig für internen, fehlerfreien Pipeline-Checkout
|
||||||
|
- FORGEJO__ACTIONS__ENABLED=true
|
||||||
|
- FORGEJO__PACKAGES__ENABLED=true
|
||||||
|
- FORGEJO__PACKAGES__CONTAINER_ENABLED=true
|
||||||
|
volumes:
|
||||||
|
- forgejo-data:/data
|
||||||
|
restart: always
|
||||||
|
|
||||||
|
# 2. NGINX REVERSE PROXY (Bedient den HTTPS-Zwang des Docker-Logins/Pushs)
|
||||||
|
nginx:
|
||||||
|
image: nginx:alpine
|
||||||
|
container_name: nginx-proxy
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
ports:
|
||||||
|
- "3000:443" # Der verschlüsselte HTTPS-Port für deine Pipeline ('docker login localhost:3000')
|
||||||
|
- "3005:80" # Der unverschlüsselte Fallback-Port für deinen bequemen Browser-SSH-Tunnel
|
||||||
|
volumes:
|
||||||
|
- ./nginx.conf:/etc/nginx/nginx.conf:ro
|
||||||
|
- ./nginx_ssl:/etc/nginx/ssl:ro
|
||||||
|
restart: always
|
||||||
|
|
||||||
|
# 3. FORGEJO RUNNER (Der lokale Pipeline-Arbeiter im Schlafmodus für Registrierung)
|
||||||
|
forgejo-runner:
|
||||||
|
image: data.forgejo.org/forgejo/runner:9
|
||||||
|
container_name: forgejo-runner
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
user: "0:0"
|
||||||
|
entrypoint: ["/bin/sh", "-c"]
|
||||||
|
#command: ["tail -f /dev/null"] # <--- Schlafmodus aktiv für deine manuelle Registrierung via Host
|
||||||
|
command: ["forgejo-runner daemon"]
|
||||||
|
environment:
|
||||||
|
- GITEA_INSTANCE_URL=http://forgejo:3000
|
||||||
|
- GITEA_RUNNER_REGISTRATION_TOKEN=juwV1ORFDdKzsazRavmsQ6BTdR0MRSDJJ6R1Maik
|
||||||
|
- GITEA_RUNNER_NAME=debian-local-runner
|
||||||
|
- GITEA_RUNNER_LABELS=ubuntu-latest:docker://docker:24-cli,debian-stable:docker://docker:24-cli
|
||||||
|
volumes:
|
||||||
|
- /var/run/docker.sock:/var/run/docker.sock
|
||||||
|
- runner-data:/data
|
||||||
|
- ./runner-config.yaml:/data/runner-config.yml
|
||||||
|
- ./kind_kubeconfig:/root/.kube
|
||||||
|
depends_on:
|
||||||
|
- forgejo
|
||||||
|
- nginx
|
||||||
|
restart: always
|
||||||
|
|
||||||
|
# 4. KUBERNETES PLATFORM (K3s: Voll kompatibel mit Devuan/elogind Cgroups)
|
||||||
|
k3s-cluster:
|
||||||
|
image: rancher/k3s:v1.28.2-k3s1
|
||||||
|
container_name: local-k3s-platform
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
privileged: true
|
||||||
|
tmpfs:
|
||||||
|
- /run
|
||||||
|
- /var/run
|
||||||
|
ports:
|
||||||
|
- "8443:6443" # Für dein lokales Host-Terraform
|
||||||
|
- "8080:80" # Hierüber rufst du deine Webapp-Änderungen auf
|
||||||
|
environment:
|
||||||
|
- K3S_KUBECONFIG_OUTPUT=/output/config
|
||||||
|
- K3S_KUBECONFIG_MODE=666
|
||||||
|
volumes:
|
||||||
|
- ./kind_kubeconfig:/output
|
||||||
|
command: server --disable traefik --egress-selector-mode=disabled
|
||||||
|
restart: always
|
||||||
93
docker-compose.yml.old20
Normal file
93
docker-compose.yml.old20
Normal file
|
|
@ -0,0 +1,93 @@
|
||||||
|
networks:
|
||||||
|
test-net:
|
||||||
|
name: gitops-test-network
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
forgejo-data:
|
||||||
|
driver: local
|
||||||
|
driver_opts:
|
||||||
|
type: none
|
||||||
|
o: bind
|
||||||
|
device: ${PWD}/forgejo_data
|
||||||
|
runner-data:
|
||||||
|
driver: local
|
||||||
|
driver_opts:
|
||||||
|
type: none
|
||||||
|
o: bind
|
||||||
|
device: ${PWD}/runner_data
|
||||||
|
|
||||||
|
services:
|
||||||
|
# 1. FORGEJO (Git Server, Container Registry & Pipeline-Zentrale)
|
||||||
|
forgejo:
|
||||||
|
image: data.forgejo.org/forgejo/forgejo:9
|
||||||
|
container_name: forgejo
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
environment:
|
||||||
|
- FORGEJO__SERVER__HTTP_PORT=3000
|
||||||
|
- FORGEJO__SERVER__ROOT_URL=http://forgejo:3000
|
||||||
|
- FORGEJO__ACTIONS__ENABLED=true
|
||||||
|
- FORGEJO__PACKAGES__ENABLED=true
|
||||||
|
- FORGEJO__PACKAGES__CONTAINER_ENABLED=true
|
||||||
|
volumes:
|
||||||
|
- forgejo-data:/data
|
||||||
|
restart: always
|
||||||
|
|
||||||
|
# 2. NGINX REVERSE PROXY (Bedient den HTTPS-Zwang des Docker-Logins/Pushs via Port 3000)
|
||||||
|
nginx:
|
||||||
|
image: nginx:alpine
|
||||||
|
container_name: nginx-proxy
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
ports:
|
||||||
|
- "3005:443" # Verschlüsseltes SSL-Tor für Docker (nginx:443 intern)
|
||||||
|
- "3000:80" # Unverschlüsselter Port für deinen SSH-Tunnel-Browser
|
||||||
|
volumes:
|
||||||
|
- ./nginx.conf:/etc/nginx/nginx.conf:ro
|
||||||
|
- ./nginx_ssl:/etc/nginx/ssl:ro
|
||||||
|
restart: always
|
||||||
|
|
||||||
|
# 3. FORGEJO RUNNER (Der lokale Pipeline-Arbeiter im Testnetzwerk)
|
||||||
|
forgejo-runner:
|
||||||
|
image: data.forgejo.org/forgejo/runner:9
|
||||||
|
container_name: forgejo-runner
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
user: "0:0"
|
||||||
|
entrypoint: ["/bin/sh", "-c"]
|
||||||
|
command: ["forgejo-runner daemon --config /data/runner-config.yml"]
|
||||||
|
environment:
|
||||||
|
- GITEA_INSTANCE_URL=http://forgejo:3000
|
||||||
|
- GITEA_REGISTRATION_TOKEN=z6xlwg3dSRYZ59zUxfrztDJasG6VkvulFyTwtJQS
|
||||||
|
- GITEA_RUNNER_NAME=debian-local-runner
|
||||||
|
- GITEA_RUNNER_LABELS=ubuntu-latest:docker://docker:24-cli,debian-stable:docker://docker:24-cli
|
||||||
|
volumes:
|
||||||
|
- /var/run/docker.sock:/var/run/docker.sock
|
||||||
|
- runner-data:/data
|
||||||
|
- ./runner-config.yaml:/data/runner-config.yml
|
||||||
|
- ./kind_kubeconfig:/root/.kube
|
||||||
|
depends_on:
|
||||||
|
- forgejo
|
||||||
|
- nginx
|
||||||
|
restart: always
|
||||||
|
|
||||||
|
# 4. KUBERNETES PLATFORM (K3s: Isoliert im selben Netzwerk)
|
||||||
|
k3s-cluster:
|
||||||
|
image: rancher/k3s:v1.28.2-k3s1
|
||||||
|
container_name: local-k3s-platform
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
privileged: true
|
||||||
|
tmpfs:
|
||||||
|
- /run
|
||||||
|
- /var/run
|
||||||
|
ports:
|
||||||
|
- "8443:6443" # Für Host-Terraform
|
||||||
|
- "8080:80" # Hierüber rufst du deine Webapp auf
|
||||||
|
environment:
|
||||||
|
- K3S_KUBECONFIG_OUTPUT=/output/config
|
||||||
|
- K3S_KUBECONFIG_MODE=666
|
||||||
|
volumes:
|
||||||
|
- ./kind_kubeconfig:/output
|
||||||
|
command: server --disable traefik --egress-selector-mode=disabled
|
||||||
|
restart: always
|
||||||
96
docker-compose.yml.old21
Normal file
96
docker-compose.yml.old21
Normal file
|
|
@ -0,0 +1,96 @@
|
||||||
|
networks:
|
||||||
|
test-net:
|
||||||
|
name: gitops-test-network
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
forgejo-data:
|
||||||
|
driver: local
|
||||||
|
driver_opts:
|
||||||
|
type: none
|
||||||
|
o: bind
|
||||||
|
device: ${PWD}/forgejo_data
|
||||||
|
runner-data:
|
||||||
|
driver: local
|
||||||
|
driver_opts:
|
||||||
|
type: none
|
||||||
|
o: bind
|
||||||
|
device: ${PWD}/runner_data
|
||||||
|
|
||||||
|
services:
|
||||||
|
# 1. FORGEJO (Git Server, Container Registry & Pipeline-Zentrale)
|
||||||
|
forgejo:
|
||||||
|
image: data.forgejo.org/forgejo/forgejo:9
|
||||||
|
container_name: forgejo
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
environment:
|
||||||
|
- FORGEJO__SERVER__HTTP_PORT=3000
|
||||||
|
- FORGEJO__SERVER__ROOT_URL=http://forgejo:3000
|
||||||
|
- FORGEJO__ACTIONS__ENABLED=true
|
||||||
|
- FORGEJO__PACKAGES__ENABLED=true
|
||||||
|
- FORGEJO__PACKAGES__CONTAINER_ENABLED=true
|
||||||
|
volumes:
|
||||||
|
- forgejo-data:/data
|
||||||
|
restart: always
|
||||||
|
|
||||||
|
# 2. NGINX REVERSE PROXY (Bedient den HTTPS-Zwang des Docker-Logins/Pushs via Port 3000)
|
||||||
|
nginx:
|
||||||
|
image: nginx:alpine
|
||||||
|
container_name: nginx-proxy
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
aliases:
|
||||||
|
- registry.local
|
||||||
|
ports:
|
||||||
|
- "3005:443" # Verschlüsseltes SSL-Tor für Docker (nginx:443 intern)
|
||||||
|
- "3000:80" # Unverschlüsselter Port für deinen SSH-Tunnel-Browser
|
||||||
|
volumes:
|
||||||
|
- ./nginx.conf:/etc/nginx/nginx.conf:ro
|
||||||
|
- ./nginx_ssl:/etc/nginx/ssl:ro
|
||||||
|
restart: always
|
||||||
|
|
||||||
|
# 3. FORGEJO RUNNER (Der lokale Pipeline-Arbeiter im Testnetzwerk)
|
||||||
|
forgejo-runner:
|
||||||
|
image: data.forgejo.org/forgejo/runner:9
|
||||||
|
container_name: forgejo-runner
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
user: "0:0"
|
||||||
|
entrypoint: ["/bin/sh", "-c"]
|
||||||
|
command: ["forgejo-runner daemon --config /data/runner-config.yml"]
|
||||||
|
environment:
|
||||||
|
- GITEA_INSTANCE_URL=http://forgejo:3000
|
||||||
|
- GITEA_REGISTRATION_TOKEN=z6xlwg3dSRYZ59zUxfrztDJasG6VkvulFyTwtJQS
|
||||||
|
- GITEA_RUNNER_NAME=debian-local-runner
|
||||||
|
- GITEA_RUNNER_LABELS=ubuntu-latest:docker://docker:24-cli,debian-stable:docker://docker:24-cli
|
||||||
|
volumes:
|
||||||
|
- /var/run/docker.sock:/var/run/docker.sock
|
||||||
|
- runner-data:/data
|
||||||
|
- ./runner-config.yaml:/data/runner-config.yml
|
||||||
|
- ./kind_kubeconfig:/root/.kube
|
||||||
|
depends_on:
|
||||||
|
- forgejo
|
||||||
|
- nginx
|
||||||
|
restart: always
|
||||||
|
|
||||||
|
# 4. KUBERNETES PLATFORM (K3s: Vertraut jetzt deiner lokalen Nginx-CA über HTTPS)
|
||||||
|
k3s-cluster:
|
||||||
|
image: rancher/k3s:v1.28.2-k3s1
|
||||||
|
container_name: local-k3s-platform
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
privileged: true
|
||||||
|
tmpfs:
|
||||||
|
- /run
|
||||||
|
- /var/run
|
||||||
|
ports:
|
||||||
|
- "8443:6443"
|
||||||
|
- "8080:80"
|
||||||
|
environment:
|
||||||
|
- K3S_KUBECONFIG_OUTPUT=/output/config
|
||||||
|
- K3S_KUBECONFIG_MODE=666
|
||||||
|
volumes:
|
||||||
|
- ./kind_kubeconfig:/output
|
||||||
|
- ./nginx_ssl/nginx.crt:/etc/containerd/certs.d/registry.local/ca.crt:ro
|
||||||
|
command: server --disable traefik --egress-selector-mode=disabled
|
||||||
|
restart: always
|
||||||
96
docker-compose.yml.old22
Normal file
96
docker-compose.yml.old22
Normal file
|
|
@ -0,0 +1,96 @@
|
||||||
|
networks:
|
||||||
|
test-net:
|
||||||
|
name: gitops-test-network
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
forgejo-data:
|
||||||
|
driver: local
|
||||||
|
driver_opts:
|
||||||
|
type: none
|
||||||
|
o: bind
|
||||||
|
device: ${PWD}/forgejo_data
|
||||||
|
runner-data:
|
||||||
|
driver: local
|
||||||
|
driver_opts:
|
||||||
|
type: none
|
||||||
|
o: bind
|
||||||
|
device: ${PWD}/runner_data
|
||||||
|
|
||||||
|
services:
|
||||||
|
# 1. FORGEJO
|
||||||
|
forgejo:
|
||||||
|
image: data.forgejo.org/forgejo/forgejo:9
|
||||||
|
container_name: forgejo
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
environment:
|
||||||
|
- FORGEJO__SERVER__HTTP_PORT=3000
|
||||||
|
- FORGEJO__SERVER__ROOT_URL=http://forgejo:3000
|
||||||
|
- FORGEJO__ACTIONS__ENABLED=true
|
||||||
|
- FORGEJO__PACKAGES__ENABLED=true
|
||||||
|
- FORGEJO__PACKAGES__CONTAINER_ENABLED=true
|
||||||
|
volumes:
|
||||||
|
- forgejo-data:/data
|
||||||
|
restart: always
|
||||||
|
|
||||||
|
# 2. NGINX REVERSE PROXY
|
||||||
|
nginx:
|
||||||
|
image: nginx:alpine
|
||||||
|
container_name: nginx-proxy
|
||||||
|
networks:
|
||||||
|
test-net:
|
||||||
|
aliases:
|
||||||
|
- registry.local
|
||||||
|
ports:
|
||||||
|
- "3005:443"
|
||||||
|
- "3000:80"
|
||||||
|
volumes:
|
||||||
|
- ./nginx.conf:/etc/nginx/nginx.conf:ro
|
||||||
|
- ./nginx_ssl:/etc/nginx/ssl:ro
|
||||||
|
restart: always
|
||||||
|
|
||||||
|
# 3. FORGEJO RUNNER
|
||||||
|
forgejo-runner:
|
||||||
|
image: data.forgejo.org/forgejo/runner:9
|
||||||
|
container_name: forgejo-runner
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
user: "0:0"
|
||||||
|
entrypoint: ["/bin/sh", "-c"]
|
||||||
|
command: ["forgejo-runner daemon --config /data/runner-config.yml"]
|
||||||
|
environment:
|
||||||
|
- GITEA_INSTANCE_URL=http://forgejo:3000
|
||||||
|
- GITEA_REGISTRATION_TOKEN=z6xlwg3dSRYZ59zUxfrztDJasG6VkvulFyTwtJQS
|
||||||
|
- GITEA_RUNNER_NAME=debian-local-runner
|
||||||
|
- GITEA_RUNNER_LABELS=ubuntu-latest:docker://docker:24-cli,debian-stable:docker://docker:24-cli
|
||||||
|
volumes:
|
||||||
|
- /var/run/docker.sock:/var/run/docker.sock
|
||||||
|
- runner-data:/data
|
||||||
|
- ./runner-config.yaml:/data/runner-config.yml
|
||||||
|
- ./kind_kubeconfig:/root/.kube
|
||||||
|
depends_on:
|
||||||
|
- forgejo
|
||||||
|
- nginx
|
||||||
|
restart: always
|
||||||
|
|
||||||
|
# 4. KUBERNETES PLATFORM (K3s)
|
||||||
|
k3s-cluster:
|
||||||
|
image: rancher/k3s:v1.28.2-k3s1
|
||||||
|
container_name: local-k3s-platform
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
privileged: true
|
||||||
|
tmpfs:
|
||||||
|
- /run
|
||||||
|
- /var/run
|
||||||
|
ports:
|
||||||
|
- "8443:6443"
|
||||||
|
- "8080:80"
|
||||||
|
environment:
|
||||||
|
- K3S_KUBECONFIG_OUTPUT=/output/config
|
||||||
|
- K3S_KUBECONFIG_MODE=666
|
||||||
|
volumes:
|
||||||
|
- ./kind_kubeconfig:/output
|
||||||
|
- ./nginx_ssl/nginx.crt:/etc/containerd/certs.d/registry.local/ca.crt:ro
|
||||||
|
command: server --disable traefik --egress-selector-mode=disabled
|
||||||
|
restart: always
|
||||||
99
docker-compose.yml.old23
Normal file
99
docker-compose.yml.old23
Normal file
|
|
@ -0,0 +1,99 @@
|
||||||
|
networks:
|
||||||
|
test-net:
|
||||||
|
name: gitops-test-network
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
forgejo-data:
|
||||||
|
driver: local
|
||||||
|
driver_opts:
|
||||||
|
type: none
|
||||||
|
o: bind
|
||||||
|
device: ${PWD}/forgejo_data
|
||||||
|
runner-data:
|
||||||
|
driver: local
|
||||||
|
driver_opts:
|
||||||
|
type: none
|
||||||
|
o: bind
|
||||||
|
device: ${PWD}/runner_data
|
||||||
|
|
||||||
|
services:
|
||||||
|
# 1. FORGEJO
|
||||||
|
forgejo:
|
||||||
|
image: data.forgejo.org/forgejo/forgejo:9
|
||||||
|
container_name: forgejo
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
environment:
|
||||||
|
- FORGEJO__SERVER__HTTP_PORT=3000
|
||||||
|
- FORGEJO__SERVER__ROOT_URL=http://forgejo:3000
|
||||||
|
- FORGEJO__ACTIONS__ENABLED=true
|
||||||
|
- FORGEJO__PACKAGES__ENABLED=true
|
||||||
|
- FORGEJO__PACKAGES__CONTAINER_ENABLED=true
|
||||||
|
volumes:
|
||||||
|
- forgejo-data:/data
|
||||||
|
restart: always
|
||||||
|
|
||||||
|
# 2. NGINX REVERSE PROXY
|
||||||
|
nginx:
|
||||||
|
image: nginx:alpine
|
||||||
|
container_name: nginx-proxy
|
||||||
|
networks:
|
||||||
|
test-net:
|
||||||
|
aliases:
|
||||||
|
- registry.local
|
||||||
|
ports:
|
||||||
|
- "3005:443"
|
||||||
|
- "3000:80"
|
||||||
|
volumes:
|
||||||
|
- ./nginx.conf:/etc/nginx/nginx.conf:ro
|
||||||
|
- ./nginx_ssl:/etc/nginx/ssl:ro
|
||||||
|
restart: always
|
||||||
|
|
||||||
|
# 3. FORGEJO RUNNER
|
||||||
|
forgejo-runner:
|
||||||
|
image: data.forgejo.org/forgejo/runner:9
|
||||||
|
container_name: forgejo-runner
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
user: "0:0"
|
||||||
|
entrypoint: ["/bin/sh", "-c"]
|
||||||
|
command: ["forgejo-runner daemon --config /data/runner-config.yml"]
|
||||||
|
environment:
|
||||||
|
- GITEA_INSTANCE_URL=http://forgejo:3000
|
||||||
|
- GITEA_REGISTRATION_TOKEN=z6xlwg3dSRYZ59zUxfrztDJasG6VkvulFyTwtJQS
|
||||||
|
- GITEA_RUNNER_NAME=debian-local-runner
|
||||||
|
- GITEA_RUNNER_LABELS=ubuntu-latest:docker://docker:24-cli,debian-stable:docker://docker:24-cli
|
||||||
|
volumes:
|
||||||
|
- /var/run/docker.sock:/var/run/docker.sock
|
||||||
|
- runner-data:/data
|
||||||
|
- ./runner-config.yaml:/data/runner-config.yml
|
||||||
|
- ./kind_kubeconfig:/root/.kube
|
||||||
|
depends_on:
|
||||||
|
- forgejo
|
||||||
|
- nginx
|
||||||
|
restart: always
|
||||||
|
|
||||||
|
# 4. KUBERNETES PLATFORM (K3s)
|
||||||
|
k3s-cluster:
|
||||||
|
image: rancher/k3s:v1.28.2-k3s1
|
||||||
|
container_name: local-k3s-platform
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
privileged: true
|
||||||
|
tmpfs:
|
||||||
|
- /run
|
||||||
|
- /var/run
|
||||||
|
ports:
|
||||||
|
- "8443:6443"
|
||||||
|
- "8080:80"
|
||||||
|
environment:
|
||||||
|
- K3S_KUBECONFIG_OUTPUT=/output/config
|
||||||
|
- K3S_KUBECONFIG_MODE=666
|
||||||
|
volumes:
|
||||||
|
- ./kind_kubeconfig:/output
|
||||||
|
# 1. Für die containerd-Runtime spezifisch
|
||||||
|
- ./nginx_ssl/nginx.crt:/etc/containerd/certs.d/registry.local/ca.crt:ro
|
||||||
|
# 2. DIE SYSTEMWEITE RETTUNG: Verankert die CA direkt im Linux-Zertifikatsspeicher des K3s-Betriebssystems!
|
||||||
|
- ./nginx_ssl/nginx.crt:/usr/local/share/ca-certificates/registry-ca.crt:ro
|
||||||
|
command: server --disable traefik --egress-selector-mode=disabled
|
||||||
|
restart: always
|
||||||
81
docker-compose.yml.old9
Normal file
81
docker-compose.yml.old9
Normal file
|
|
@ -0,0 +1,81 @@
|
||||||
|
networks:
|
||||||
|
test-net:
|
||||||
|
driver: bridge
|
||||||
|
name: gitops-test-network
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
# Erzeugt die Ordner lokal und korrigiert automatisch die Docker-Berechtigungen
|
||||||
|
forgejo-data:
|
||||||
|
driver: local
|
||||||
|
driver_opts:
|
||||||
|
type: none
|
||||||
|
o: bind
|
||||||
|
device: ${PWD}/forgejo_data
|
||||||
|
runner-data:
|
||||||
|
driver: local
|
||||||
|
driver_opts:
|
||||||
|
type: none
|
||||||
|
o: bind
|
||||||
|
device: ${PWD}/runner_data
|
||||||
|
|
||||||
|
services:
|
||||||
|
# 1. FORGEJO (Git Server + Registry)
|
||||||
|
forgejo:
|
||||||
|
image: data.forgejo.org/forgejo/forgejo:9
|
||||||
|
container_name: forgejo
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
environment:
|
||||||
|
- FORGEJO__SERVER__HTTP_PORT=3000
|
||||||
|
- FORGEJO__SERVER__ROOT_URL=http://localhost:3000
|
||||||
|
- FORGEJO__ACTIONS__ENABLED=true
|
||||||
|
- FORGEJO__PACKAGES__ENABLED=true
|
||||||
|
- FORGEJO__PACKAGES__CONTAINER_ENABLED=true
|
||||||
|
ports:
|
||||||
|
- "3000:3000"
|
||||||
|
- "3005:3000"
|
||||||
|
- "2222:22"
|
||||||
|
volumes:
|
||||||
|
- forgejo-data:/data # Nutzt das sichere Named-Volume
|
||||||
|
restart: always
|
||||||
|
|
||||||
|
# 2. FORGEJO RUNNER (Pipeline-Ausführung)
|
||||||
|
forgejo-runner:
|
||||||
|
image: data.forgejo.org/forgejo/runner:9
|
||||||
|
container_name: forgejo-runner
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
entrypoint: ["/bin/sh", "-c"]
|
||||||
|
command: ["forgejo-runner daemon"]
|
||||||
|
#command: ["tail -f /dev/null"]
|
||||||
|
environment:
|
||||||
|
- GITEA_INSTANCE_URL=http://forgejo:3000
|
||||||
|
- GITEA_RUNNER_REGISTRATION_TOKEN=z6xlwg3dSRYZ59zUxfrztDJasG6VkvulFyTwtJQS
|
||||||
|
- GITEA_RUNNER_NAME=debian-local-runner
|
||||||
|
- GITEA_RUNNER_LABELS=ubuntu-latest:docker://node:20-bullseye,debian-stable:docker://debian:stable-slim
|
||||||
|
volumes:
|
||||||
|
- /var/run/docker.sock:/var/run/docker.sock
|
||||||
|
- runner-data:/data
|
||||||
|
depends_on:
|
||||||
|
- forgejo
|
||||||
|
restart: always
|
||||||
|
|
||||||
|
# 3. KUBERNETES INITIALIZER (Flüchtiger Test-Cluster)
|
||||||
|
kind-cluster:
|
||||||
|
image: alpine:latest
|
||||||
|
container_name: gitops-test-control-plane
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
volumes:
|
||||||
|
- /var/run/docker.sock:/var/run/docker.sock
|
||||||
|
- ./kind_kubeconfig:/output_kubeconfig
|
||||||
|
entrypoint: >
|
||||||
|
sh -c "apk add --no-cache curl docker-cli;
|
||||||
|
curl -sfL https://k8s.io -o /usr/local/bin/kind;
|
||||||
|
chmod +x /usr/local/bin/kind;
|
||||||
|
if ! /usr/local/bin/kind get clusters 2>/dev/null | grep -q gitops-test; then
|
||||||
|
/usr/local/bin/kind create cluster --name gitops-test --image kindest/node:v1.28.0;
|
||||||
|
fi;
|
||||||
|
/usr/local/bin/kind get kubeconfig --name gitops-test > /output_kubeconfig/config;
|
||||||
|
tail -f /dev/null"
|
||||||
|
restart: always
|
||||||
82
docker-compose.yml.systemd
Normal file
82
docker-compose.yml.systemd
Normal file
|
|
@ -0,0 +1,82 @@
|
||||||
|
networks:
|
||||||
|
test-net:
|
||||||
|
driver: bridge
|
||||||
|
name: gitops-test-network
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
forgejo-data:
|
||||||
|
driver: local
|
||||||
|
driver_opts:
|
||||||
|
type: none
|
||||||
|
o: bind
|
||||||
|
device: ${PWD}/forgejo_data
|
||||||
|
runner-data:
|
||||||
|
driver: local
|
||||||
|
driver_opts:
|
||||||
|
type: none
|
||||||
|
o: bind
|
||||||
|
device: ${PWD}/runner_data
|
||||||
|
|
||||||
|
services:
|
||||||
|
# 1. FORGEJO
|
||||||
|
forgejo:
|
||||||
|
image: data.forgejo.org/forgejo/forgejo:9
|
||||||
|
container_name: forgejo
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
environment:
|
||||||
|
- FORGEJO__SERVER__HTTP_PORT=3000
|
||||||
|
- FORGEJO__SERVER__ROOT_URL=http://localhost:3000
|
||||||
|
- FORGEJO__ACTIONS__ENABLED=true
|
||||||
|
- FORGEJO__PACKAGES__ENABLED=true
|
||||||
|
- FORGEJO__PACKAGES__CONTAINER_ENABLED=true
|
||||||
|
ports:
|
||||||
|
- "3000:3000"
|
||||||
|
- "3005:3000"
|
||||||
|
- "2222:22"
|
||||||
|
volumes:
|
||||||
|
- forgejo-data:/data
|
||||||
|
restart: always
|
||||||
|
|
||||||
|
# 2. FORGEJO RUNNER
|
||||||
|
forgejo-runner:
|
||||||
|
image: data.forgejo.org/forgejo/runner:9
|
||||||
|
container_name: forgejo-runner
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
user: "0:0"
|
||||||
|
entrypoint: ["/bin/sh", "-c"]
|
||||||
|
command: ["forgejo-runner daemon"]
|
||||||
|
environment:
|
||||||
|
- GITEA_INSTANCE_URL=http://forgejo:3000
|
||||||
|
- GITEA_RUNNER_REGISTRATION_TOKEN=z6xlwg3dSRYZ59zUxfrztDJasG6VkvulFyTwtJQS
|
||||||
|
- GITEA_RUNNER_NAME=debian-local-runner
|
||||||
|
- GITEA_RUNNER_LABELS=ubuntu-latest:docker://debian:stable-slim,debian-stable:docker://debian:stable-slim
|
||||||
|
volumes:
|
||||||
|
- /var/run/docker.sock:/var/run/docker.sock
|
||||||
|
- runner-data:/data
|
||||||
|
depends_on:
|
||||||
|
- forgejo
|
||||||
|
restart: always
|
||||||
|
|
||||||
|
# 3. KUBERNETES INITIALIZER (KORRIGIERT: Explizite Binary-URL)
|
||||||
|
kind-cluster:
|
||||||
|
image: alpine:latest
|
||||||
|
#container_name: gitops-test-control-plane
|
||||||
|
container_name: kind-initializer
|
||||||
|
networks:
|
||||||
|
- test-net
|
||||||
|
volumes:
|
||||||
|
- /var/run/docker.sock:/var/run/docker.sock
|
||||||
|
- ./kind_kubeconfig:/output_kubeconfig
|
||||||
|
entrypoint: >
|
||||||
|
sh -c "apk add --no-cache wget docker-cli ca-certificates;
|
||||||
|
update-ca-certificates;
|
||||||
|
wget -q --show-progress https://github.com/kubernetes-sigs/kind/releases/download/v0.24.0/kind-linux-amd64 -O /usr/local/bin/kind;
|
||||||
|
chmod +x /usr/local/bin/kind;
|
||||||
|
if ! /usr/local/bin/kind get clusters 2>/dev/null | grep -q gitops-test; then
|
||||||
|
/usr/local/bin/kind create cluster --name gitops-test --image kindest/node:v1.28.0;
|
||||||
|
fi;
|
||||||
|
/usr/local/bin/kind get kubeconfig --name gitops-test > /output_kubeconfig/config;
|
||||||
|
tail -f /dev/null"
|
||||||
|
restart: always
|
||||||
0
forgejo_data/git/.ssh/authorized_keys
Normal file
0
forgejo_data/git/.ssh/authorized_keys
Normal file
1
forgejo_data/git/.ssh/environment
Normal file
1
forgejo_data/git/.ssh/environment
Normal file
|
|
@ -0,0 +1 @@
|
||||||
|
GITEA_CUSTOM=/data/gitea
|
||||||
|
|
@ -0,0 +1 @@
|
||||||
|
ref: refs/heads/main
|
||||||
|
|
@ -0,0 +1,4 @@
|
||||||
|
[core]
|
||||||
|
repositoryformatversion = 0
|
||||||
|
filemode = true
|
||||||
|
bare = true
|
||||||
|
|
@ -0,0 +1 @@
|
||||||
|
Unnamed repository; edit this file 'description' to name the repository.
|
||||||
|
|
@ -0,0 +1,15 @@
|
||||||
|
#!/bin/sh
|
||||||
|
#
|
||||||
|
# An example hook script to check the commit log message taken by
|
||||||
|
# applypatch from an e-mail message.
|
||||||
|
#
|
||||||
|
# The hook should exit with non-zero status after issuing an
|
||||||
|
# appropriate message if it wants to stop the commit. The hook is
|
||||||
|
# allowed to edit the commit message file.
|
||||||
|
#
|
||||||
|
# To enable this hook, rename this file to "applypatch-msg".
|
||||||
|
|
||||||
|
. git-sh-setup
|
||||||
|
commitmsg="$(git rev-parse --git-path hooks/commit-msg)"
|
||||||
|
test -x "$commitmsg" && exec "$commitmsg" ${1+"$@"}
|
||||||
|
:
|
||||||
|
|
@ -0,0 +1,24 @@
|
||||||
|
#!/bin/sh
|
||||||
|
#
|
||||||
|
# An example hook script to check the commit log message.
|
||||||
|
# Called by "git commit" with one argument, the name of the file
|
||||||
|
# that has the commit message. The hook should exit with non-zero
|
||||||
|
# status after issuing an appropriate message if it wants to stop the
|
||||||
|
# commit. The hook is allowed to edit the commit message file.
|
||||||
|
#
|
||||||
|
# To enable this hook, rename this file to "commit-msg".
|
||||||
|
|
||||||
|
# Uncomment the below to add a Signed-off-by line to the message.
|
||||||
|
# Doing this in a hook is a bad idea in general, but the prepare-commit-msg
|
||||||
|
# hook is more suited to it.
|
||||||
|
#
|
||||||
|
# SOB=$(git var GIT_AUTHOR_IDENT | sed -n 's/^\(.*>\).*$/Signed-off-by: \1/p')
|
||||||
|
# grep -qs "^$SOB" "$1" || echo "$SOB" >> "$1"
|
||||||
|
|
||||||
|
# This example catches duplicate Signed-off-by lines.
|
||||||
|
|
||||||
|
test "" = "$(grep '^Signed-off-by: ' "$1" |
|
||||||
|
sort | uniq -c | sed -e '/^[ ]*1[ ]/d')" || {
|
||||||
|
echo >&2 Duplicate Signed-off-by lines.
|
||||||
|
exit 1
|
||||||
|
}
|
||||||
16
forgejo_data/git/repositories/bast/my-app-sandbox.git/hooks/post-receive
Executable file
16
forgejo_data/git/repositories/bast/my-app-sandbox.git/hooks/post-receive
Executable file
|
|
@ -0,0 +1,16 @@
|
||||||
|
#!/usr/bin/env bash
|
||||||
|
# AUTO GENERATED BY GITEA, DO NOT MODIFY
|
||||||
|
data=$(cat)
|
||||||
|
exitcodes=""
|
||||||
|
hookname=$(basename $0)
|
||||||
|
GIT_DIR=${GIT_DIR:-$(dirname $0)/..}
|
||||||
|
|
||||||
|
for hook in ${GIT_DIR}/hooks/${hookname}.d/*; do
|
||||||
|
test -x "${hook}" && test -f "${hook}" || continue
|
||||||
|
echo "${data}" | "${hook}"
|
||||||
|
exitcodes="${exitcodes} $?"
|
||||||
|
done
|
||||||
|
|
||||||
|
for i in ${exitcodes}; do
|
||||||
|
[ ${i} -eq 0 ] || exit ${i}
|
||||||
|
done
|
||||||
|
|
@ -0,0 +1,3 @@
|
||||||
|
#!/usr/bin/env bash
|
||||||
|
# AUTO GENERATED BY GITEA, DO NOT MODIFY
|
||||||
|
/usr/local/bin/gitea hook --config=/data/gitea/conf/app.ini post-receive
|
||||||
|
|
@ -0,0 +1,8 @@
|
||||||
|
#!/bin/sh
|
||||||
|
#
|
||||||
|
# An example hook script to prepare a packed repository for use over
|
||||||
|
# dumb transports.
|
||||||
|
#
|
||||||
|
# To enable this hook, rename this file to "post-update".
|
||||||
|
|
||||||
|
exec git update-server-info
|
||||||
|
|
@ -0,0 +1,14 @@
|
||||||
|
#!/bin/sh
|
||||||
|
#
|
||||||
|
# An example hook script to verify what is about to be committed
|
||||||
|
# by applypatch from an e-mail message.
|
||||||
|
#
|
||||||
|
# The hook should exit with non-zero status after issuing an
|
||||||
|
# appropriate message if it wants to stop the commit.
|
||||||
|
#
|
||||||
|
# To enable this hook, rename this file to "pre-applypatch".
|
||||||
|
|
||||||
|
. git-sh-setup
|
||||||
|
precommit="$(git rev-parse --git-path hooks/pre-commit)"
|
||||||
|
test -x "$precommit" && exec "$precommit" ${1+"$@"}
|
||||||
|
:
|
||||||
|
|
@ -0,0 +1,49 @@
|
||||||
|
#!/bin/sh
|
||||||
|
#
|
||||||
|
# An example hook script to verify what is about to be committed.
|
||||||
|
# Called by "git commit" with no arguments. The hook should
|
||||||
|
# exit with non-zero status after issuing an appropriate message if
|
||||||
|
# it wants to stop the commit.
|
||||||
|
#
|
||||||
|
# To enable this hook, rename this file to "pre-commit".
|
||||||
|
|
||||||
|
if git rev-parse --verify HEAD >/dev/null 2>&1
|
||||||
|
then
|
||||||
|
against=HEAD
|
||||||
|
else
|
||||||
|
# Initial commit: diff against an empty tree object
|
||||||
|
against=$(git hash-object -t tree /dev/null)
|
||||||
|
fi
|
||||||
|
|
||||||
|
# If you want to allow non-ASCII filenames set this variable to true.
|
||||||
|
allownonascii=$(git config --type=bool hooks.allownonascii)
|
||||||
|
|
||||||
|
# Redirect output to stderr.
|
||||||
|
exec 1>&2
|
||||||
|
|
||||||
|
# Cross platform projects tend to avoid non-ASCII filenames; prevent
|
||||||
|
# them from being added to the repository. We exploit the fact that the
|
||||||
|
# printable range starts at the space character and ends with tilde.
|
||||||
|
if [ "$allownonascii" != "true" ] &&
|
||||||
|
# Note that the use of brackets around a tr range is ok here, (it's
|
||||||
|
# even required, for portability to Solaris 10's /usr/bin/tr), since
|
||||||
|
# the square bracket bytes happen to fall in the designated range.
|
||||||
|
test $(git diff-index --cached --name-only --diff-filter=A -z $against |
|
||||||
|
LC_ALL=C tr -d '[ -~]\0' | wc -c) != 0
|
||||||
|
then
|
||||||
|
cat <<\EOF
|
||||||
|
Error: Attempt to add a non-ASCII file name.
|
||||||
|
|
||||||
|
This can cause problems if you want to work with people on other platforms.
|
||||||
|
|
||||||
|
To be portable it is advisable to rename the file.
|
||||||
|
|
||||||
|
If you know what you are doing you can disable this check using:
|
||||||
|
|
||||||
|
git config hooks.allownonascii true
|
||||||
|
EOF
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
# If there are whitespace errors, print the offending file names and fail.
|
||||||
|
exec git diff-index --check --cached $against --
|
||||||
|
|
@ -0,0 +1,13 @@
|
||||||
|
#!/bin/sh
|
||||||
|
#
|
||||||
|
# An example hook script to verify what is about to be committed.
|
||||||
|
# Called by "git merge" with no arguments. The hook should
|
||||||
|
# exit with non-zero status after issuing an appropriate message to
|
||||||
|
# stderr if it wants to stop the merge commit.
|
||||||
|
#
|
||||||
|
# To enable this hook, rename this file to "pre-merge-commit".
|
||||||
|
|
||||||
|
. git-sh-setup
|
||||||
|
test -x "$GIT_DIR/hooks/pre-commit" &&
|
||||||
|
exec "$GIT_DIR/hooks/pre-commit"
|
||||||
|
:
|
||||||
53
forgejo_data/git/repositories/bast/my-app-sandbox.git/hooks/pre-push.sample
Executable file
53
forgejo_data/git/repositories/bast/my-app-sandbox.git/hooks/pre-push.sample
Executable file
|
|
@ -0,0 +1,53 @@
|
||||||
|
#!/bin/sh
|
||||||
|
|
||||||
|
# An example hook script to verify what is about to be pushed. Called by "git
|
||||||
|
# push" after it has checked the remote status, but before anything has been
|
||||||
|
# pushed. If this script exits with a non-zero status nothing will be pushed.
|
||||||
|
#
|
||||||
|
# This hook is called with the following parameters:
|
||||||
|
#
|
||||||
|
# $1 -- Name of the remote to which the push is being done
|
||||||
|
# $2 -- URL to which the push is being done
|
||||||
|
#
|
||||||
|
# If pushing without using a named remote those arguments will be equal.
|
||||||
|
#
|
||||||
|
# Information about the commits which are being pushed is supplied as lines to
|
||||||
|
# the standard input in the form:
|
||||||
|
#
|
||||||
|
# <local ref> <local oid> <remote ref> <remote oid>
|
||||||
|
#
|
||||||
|
# This sample shows how to prevent push of commits where the log message starts
|
||||||
|
# with "WIP" (work in progress).
|
||||||
|
|
||||||
|
remote="$1"
|
||||||
|
url="$2"
|
||||||
|
|
||||||
|
zero=$(git hash-object --stdin </dev/null | tr '[0-9a-f]' '0')
|
||||||
|
|
||||||
|
while read local_ref local_oid remote_ref remote_oid
|
||||||
|
do
|
||||||
|
if test "$local_oid" = "$zero"
|
||||||
|
then
|
||||||
|
# Handle delete
|
||||||
|
:
|
||||||
|
else
|
||||||
|
if test "$remote_oid" = "$zero"
|
||||||
|
then
|
||||||
|
# New branch, examine all commits
|
||||||
|
range="$local_oid"
|
||||||
|
else
|
||||||
|
# Update to existing branch, examine new commits
|
||||||
|
range="$remote_oid..$local_oid"
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Check for WIP commit
|
||||||
|
commit=$(git rev-list -n 1 --grep '^WIP' "$range")
|
||||||
|
if test -n "$commit"
|
||||||
|
then
|
||||||
|
echo >&2 "Found WIP commit in $local_ref, not pushing"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
|
||||||
|
exit 0
|
||||||
169
forgejo_data/git/repositories/bast/my-app-sandbox.git/hooks/pre-rebase.sample
Executable file
169
forgejo_data/git/repositories/bast/my-app-sandbox.git/hooks/pre-rebase.sample
Executable file
|
|
@ -0,0 +1,169 @@
|
||||||
|
#!/bin/sh
|
||||||
|
#
|
||||||
|
# Copyright (c) 2006, 2008 Junio C Hamano
|
||||||
|
#
|
||||||
|
# The "pre-rebase" hook is run just before "git rebase" starts doing
|
||||||
|
# its job, and can prevent the command from running by exiting with
|
||||||
|
# non-zero status.
|
||||||
|
#
|
||||||
|
# The hook is called with the following parameters:
|
||||||
|
#
|
||||||
|
# $1 -- the upstream the series was forked from.
|
||||||
|
# $2 -- the branch being rebased (or empty when rebasing the current branch).
|
||||||
|
#
|
||||||
|
# This sample shows how to prevent topic branches that are already
|
||||||
|
# merged to 'next' branch from getting rebased, because allowing it
|
||||||
|
# would result in rebasing already published history.
|
||||||
|
|
||||||
|
publish=next
|
||||||
|
basebranch="$1"
|
||||||
|
if test "$#" = 2
|
||||||
|
then
|
||||||
|
topic="refs/heads/$2"
|
||||||
|
else
|
||||||
|
topic=`git symbolic-ref HEAD` ||
|
||||||
|
exit 0 ;# we do not interrupt rebasing detached HEAD
|
||||||
|
fi
|
||||||
|
|
||||||
|
case "$topic" in
|
||||||
|
refs/heads/??/*)
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
exit 0 ;# we do not interrupt others.
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
|
||||||
|
# Now we are dealing with a topic branch being rebased
|
||||||
|
# on top of master. Is it OK to rebase it?
|
||||||
|
|
||||||
|
# Does the topic really exist?
|
||||||
|
git show-ref -q "$topic" || {
|
||||||
|
echo >&2 "No such branch $topic"
|
||||||
|
exit 1
|
||||||
|
}
|
||||||
|
|
||||||
|
# Is topic fully merged to master?
|
||||||
|
not_in_master=`git rev-list --pretty=oneline ^master "$topic"`
|
||||||
|
if test -z "$not_in_master"
|
||||||
|
then
|
||||||
|
echo >&2 "$topic is fully merged to master; better remove it."
|
||||||
|
exit 1 ;# we could allow it, but there is no point.
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Is topic ever merged to next? If so you should not be rebasing it.
|
||||||
|
only_next_1=`git rev-list ^master "^$topic" ${publish} | sort`
|
||||||
|
only_next_2=`git rev-list ^master ${publish} | sort`
|
||||||
|
if test "$only_next_1" = "$only_next_2"
|
||||||
|
then
|
||||||
|
not_in_topic=`git rev-list "^$topic" master`
|
||||||
|
if test -z "$not_in_topic"
|
||||||
|
then
|
||||||
|
echo >&2 "$topic is already up to date with master"
|
||||||
|
exit 1 ;# we could allow it, but there is no point.
|
||||||
|
else
|
||||||
|
exit 0
|
||||||
|
fi
|
||||||
|
else
|
||||||
|
not_in_next=`git rev-list --pretty=oneline ^${publish} "$topic"`
|
||||||
|
/usr/bin/perl -e '
|
||||||
|
my $topic = $ARGV[0];
|
||||||
|
my $msg = "* $topic has commits already merged to public branch:\n";
|
||||||
|
my (%not_in_next) = map {
|
||||||
|
/^([0-9a-f]+) /;
|
||||||
|
($1 => 1);
|
||||||
|
} split(/\n/, $ARGV[1]);
|
||||||
|
for my $elem (map {
|
||||||
|
/^([0-9a-f]+) (.*)$/;
|
||||||
|
[$1 => $2];
|
||||||
|
} split(/\n/, $ARGV[2])) {
|
||||||
|
if (!exists $not_in_next{$elem->[0]}) {
|
||||||
|
if ($msg) {
|
||||||
|
print STDERR $msg;
|
||||||
|
undef $msg;
|
||||||
|
}
|
||||||
|
print STDERR " $elem->[1]\n";
|
||||||
|
}
|
||||||
|
}
|
||||||
|
' "$topic" "$not_in_next" "$not_in_master"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
<<\DOC_END
|
||||||
|
|
||||||
|
This sample hook safeguards topic branches that have been
|
||||||
|
published from being rewound.
|
||||||
|
|
||||||
|
The workflow assumed here is:
|
||||||
|
|
||||||
|
* Once a topic branch forks from "master", "master" is never
|
||||||
|
merged into it again (either directly or indirectly).
|
||||||
|
|
||||||
|
* Once a topic branch is fully cooked and merged into "master",
|
||||||
|
it is deleted. If you need to build on top of it to correct
|
||||||
|
earlier mistakes, a new topic branch is created by forking at
|
||||||
|
the tip of the "master". This is not strictly necessary, but
|
||||||
|
it makes it easier to keep your history simple.
|
||||||
|
|
||||||
|
* Whenever you need to test or publish your changes to topic
|
||||||
|
branches, merge them into "next" branch.
|
||||||
|
|
||||||
|
The script, being an example, hardcodes the publish branch name
|
||||||
|
to be "next", but it is trivial to make it configurable via
|
||||||
|
$GIT_DIR/config mechanism.
|
||||||
|
|
||||||
|
With this workflow, you would want to know:
|
||||||
|
|
||||||
|
(1) ... if a topic branch has ever been merged to "next". Young
|
||||||
|
topic branches can have stupid mistakes you would rather
|
||||||
|
clean up before publishing, and things that have not been
|
||||||
|
merged into other branches can be easily rebased without
|
||||||
|
affecting other people. But once it is published, you would
|
||||||
|
not want to rewind it.
|
||||||
|
|
||||||
|
(2) ... if a topic branch has been fully merged to "master".
|
||||||
|
Then you can delete it. More importantly, you should not
|
||||||
|
build on top of it -- other people may already want to
|
||||||
|
change things related to the topic as patches against your
|
||||||
|
"master", so if you need further changes, it is better to
|
||||||
|
fork the topic (perhaps with the same name) afresh from the
|
||||||
|
tip of "master".
|
||||||
|
|
||||||
|
Let's look at this example:
|
||||||
|
|
||||||
|
o---o---o---o---o---o---o---o---o---o "next"
|
||||||
|
/ / / /
|
||||||
|
/ a---a---b A / /
|
||||||
|
/ / / /
|
||||||
|
/ / c---c---c---c B /
|
||||||
|
/ / / \ /
|
||||||
|
/ / / b---b C \ /
|
||||||
|
/ / / / \ /
|
||||||
|
---o---o---o---o---o---o---o---o---o---o---o "master"
|
||||||
|
|
||||||
|
|
||||||
|
A, B and C are topic branches.
|
||||||
|
|
||||||
|
* A has one fix since it was merged up to "next".
|
||||||
|
|
||||||
|
* B has finished. It has been fully merged up to "master" and "next",
|
||||||
|
and is ready to be deleted.
|
||||||
|
|
||||||
|
* C has not merged to "next" at all.
|
||||||
|
|
||||||
|
We would want to allow C to be rebased, refuse A, and encourage
|
||||||
|
B to be deleted.
|
||||||
|
|
||||||
|
To compute (1):
|
||||||
|
|
||||||
|
git rev-list ^master ^topic next
|
||||||
|
git rev-list ^master next
|
||||||
|
|
||||||
|
if these match, topic has not merged in next at all.
|
||||||
|
|
||||||
|
To compute (2):
|
||||||
|
|
||||||
|
git rev-list master..topic
|
||||||
|
|
||||||
|
if this is empty, it is fully merged to "master".
|
||||||
|
|
||||||
|
DOC_END
|
||||||
16
forgejo_data/git/repositories/bast/my-app-sandbox.git/hooks/pre-receive
Executable file
16
forgejo_data/git/repositories/bast/my-app-sandbox.git/hooks/pre-receive
Executable file
|
|
@ -0,0 +1,16 @@
|
||||||
|
#!/usr/bin/env bash
|
||||||
|
# AUTO GENERATED BY GITEA, DO NOT MODIFY
|
||||||
|
data=$(cat)
|
||||||
|
exitcodes=""
|
||||||
|
hookname=$(basename $0)
|
||||||
|
GIT_DIR=${GIT_DIR:-$(dirname $0)/..}
|
||||||
|
|
||||||
|
for hook in ${GIT_DIR}/hooks/${hookname}.d/*; do
|
||||||
|
test -x "${hook}" && test -f "${hook}" || continue
|
||||||
|
echo "${data}" | "${hook}"
|
||||||
|
exitcodes="${exitcodes} $?"
|
||||||
|
done
|
||||||
|
|
||||||
|
for i in ${exitcodes}; do
|
||||||
|
[ ${i} -eq 0 ] || exit ${i}
|
||||||
|
done
|
||||||
|
|
@ -0,0 +1,3 @@
|
||||||
|
#!/usr/bin/env bash
|
||||||
|
# AUTO GENERATED BY GITEA, DO NOT MODIFY
|
||||||
|
/usr/local/bin/gitea hook --config=/data/gitea/conf/app.ini pre-receive
|
||||||
|
|
@ -0,0 +1,24 @@
|
||||||
|
#!/bin/sh
|
||||||
|
#
|
||||||
|
# An example hook script to make use of push options.
|
||||||
|
# The example simply echoes all push options that start with 'echoback='
|
||||||
|
# and rejects all pushes when the "reject" push option is used.
|
||||||
|
#
|
||||||
|
# To enable this hook, rename this file to "pre-receive".
|
||||||
|
|
||||||
|
if test -n "$GIT_PUSH_OPTION_COUNT"
|
||||||
|
then
|
||||||
|
i=0
|
||||||
|
while test "$i" -lt "$GIT_PUSH_OPTION_COUNT"
|
||||||
|
do
|
||||||
|
eval "value=\$GIT_PUSH_OPTION_$i"
|
||||||
|
case "$value" in
|
||||||
|
echoback=*)
|
||||||
|
echo "echo from the pre-receive-hook: ${value#*=}" >&2
|
||||||
|
;;
|
||||||
|
reject)
|
||||||
|
exit 1
|
||||||
|
esac
|
||||||
|
i=$((i + 1))
|
||||||
|
done
|
||||||
|
fi
|
||||||
|
|
@ -0,0 +1,42 @@
|
||||||
|
#!/bin/sh
|
||||||
|
#
|
||||||
|
# An example hook script to prepare the commit log message.
|
||||||
|
# Called by "git commit" with the name of the file that has the
|
||||||
|
# commit message, followed by the description of the commit
|
||||||
|
# message's source. The hook's purpose is to edit the commit
|
||||||
|
# message file. If the hook fails with a non-zero status,
|
||||||
|
# the commit is aborted.
|
||||||
|
#
|
||||||
|
# To enable this hook, rename this file to "prepare-commit-msg".
|
||||||
|
|
||||||
|
# This hook includes three examples. The first one removes the
|
||||||
|
# "# Please enter the commit message..." help message.
|
||||||
|
#
|
||||||
|
# The second includes the output of "git diff --name-status -r"
|
||||||
|
# into the message, just before the "git status" output. It is
|
||||||
|
# commented because it doesn't cope with --amend or with squashed
|
||||||
|
# commits.
|
||||||
|
#
|
||||||
|
# The third example adds a Signed-off-by line to the message, that can
|
||||||
|
# still be edited. This is rarely a good idea.
|
||||||
|
|
||||||
|
COMMIT_MSG_FILE=$1
|
||||||
|
COMMIT_SOURCE=$2
|
||||||
|
SHA1=$3
|
||||||
|
|
||||||
|
/usr/bin/perl -i.bak -ne 'print unless(m/^. Please enter the commit message/..m/^#$/)' "$COMMIT_MSG_FILE"
|
||||||
|
|
||||||
|
# case "$COMMIT_SOURCE,$SHA1" in
|
||||||
|
# ,|template,)
|
||||||
|
# /usr/bin/perl -i.bak -pe '
|
||||||
|
# print "\n" . `git diff --cached --name-status -r`
|
||||||
|
# if /^#/ && $first++ == 0' "$COMMIT_MSG_FILE" ;;
|
||||||
|
# *) ;;
|
||||||
|
# esac
|
||||||
|
|
||||||
|
# SOB=$(git var GIT_COMMITTER_IDENT | sed -n 's/^\(.*>\).*$/Signed-off-by: \1/p')
|
||||||
|
# git interpret-trailers --in-place --trailer "$SOB" "$COMMIT_MSG_FILE"
|
||||||
|
# if test -z "$COMMIT_SOURCE"
|
||||||
|
# then
|
||||||
|
# /usr/bin/perl -i.bak -pe 'print "\n" if !$first_line++' "$COMMIT_MSG_FILE"
|
||||||
|
# fi
|
||||||
3
forgejo_data/git/repositories/bast/my-app-sandbox.git/hooks/proc-receive
Executable file
3
forgejo_data/git/repositories/bast/my-app-sandbox.git/hooks/proc-receive
Executable file
|
|
@ -0,0 +1,3 @@
|
||||||
|
#!/usr/bin/env bash
|
||||||
|
# AUTO GENERATED BY GITEA, DO NOT MODIFY
|
||||||
|
/usr/local/bin/gitea hook --config=/data/gitea/conf/app.ini proc-receive
|
||||||
|
|
@ -0,0 +1,78 @@
|
||||||
|
#!/bin/sh
|
||||||
|
|
||||||
|
# An example hook script to update a checked-out tree on a git push.
|
||||||
|
#
|
||||||
|
# This hook is invoked by git-receive-pack(1) when it reacts to git
|
||||||
|
# push and updates reference(s) in its repository, and when the push
|
||||||
|
# tries to update the branch that is currently checked out and the
|
||||||
|
# receive.denyCurrentBranch configuration variable is set to
|
||||||
|
# updateInstead.
|
||||||
|
#
|
||||||
|
# By default, such a push is refused if the working tree and the index
|
||||||
|
# of the remote repository has any difference from the currently
|
||||||
|
# checked out commit; when both the working tree and the index match
|
||||||
|
# the current commit, they are updated to match the newly pushed tip
|
||||||
|
# of the branch. This hook is to be used to override the default
|
||||||
|
# behaviour; however the code below reimplements the default behaviour
|
||||||
|
# as a starting point for convenient modification.
|
||||||
|
#
|
||||||
|
# The hook receives the commit with which the tip of the current
|
||||||
|
# branch is going to be updated:
|
||||||
|
commit=$1
|
||||||
|
|
||||||
|
# It can exit with a non-zero status to refuse the push (when it does
|
||||||
|
# so, it must not modify the index or the working tree).
|
||||||
|
die () {
|
||||||
|
echo >&2 "$*"
|
||||||
|
exit 1
|
||||||
|
}
|
||||||
|
|
||||||
|
# Or it can make any necessary changes to the working tree and to the
|
||||||
|
# index to bring them to the desired state when the tip of the current
|
||||||
|
# branch is updated to the new commit, and exit with a zero status.
|
||||||
|
#
|
||||||
|
# For example, the hook can simply run git read-tree -u -m HEAD "$1"
|
||||||
|
# in order to emulate git fetch that is run in the reverse direction
|
||||||
|
# with git push, as the two-tree form of git read-tree -u -m is
|
||||||
|
# essentially the same as git switch or git checkout that switches
|
||||||
|
# branches while keeping the local changes in the working tree that do
|
||||||
|
# not interfere with the difference between the branches.
|
||||||
|
|
||||||
|
# The below is a more-or-less exact translation to shell of the C code
|
||||||
|
# for the default behaviour for git's push-to-checkout hook defined in
|
||||||
|
# the push_to_deploy() function in builtin/receive-pack.c.
|
||||||
|
#
|
||||||
|
# Note that the hook will be executed from the repository directory,
|
||||||
|
# not from the working tree, so if you want to perform operations on
|
||||||
|
# the working tree, you will have to adapt your code accordingly, e.g.
|
||||||
|
# by adding "cd .." or using relative paths.
|
||||||
|
|
||||||
|
if ! git update-index -q --ignore-submodules --refresh
|
||||||
|
then
|
||||||
|
die "Up-to-date check failed"
|
||||||
|
fi
|
||||||
|
|
||||||
|
if ! git diff-files --quiet --ignore-submodules --
|
||||||
|
then
|
||||||
|
die "Working directory has unstaged changes"
|
||||||
|
fi
|
||||||
|
|
||||||
|
# This is a rough translation of:
|
||||||
|
#
|
||||||
|
# head_has_history() ? "HEAD" : EMPTY_TREE_SHA1_HEX
|
||||||
|
if git cat-file -e HEAD 2>/dev/null
|
||||||
|
then
|
||||||
|
head=HEAD
|
||||||
|
else
|
||||||
|
head=$(git hash-object -t tree --stdin </dev/null)
|
||||||
|
fi
|
||||||
|
|
||||||
|
if ! git diff-index --quiet --cached --ignore-submodules $head --
|
||||||
|
then
|
||||||
|
die "Working directory has staged changes"
|
||||||
|
fi
|
||||||
|
|
||||||
|
if ! git read-tree -u -m "$commit"
|
||||||
|
then
|
||||||
|
die "Could not update working tree to new HEAD"
|
||||||
|
fi
|
||||||
|
|
@ -0,0 +1,77 @@
|
||||||
|
#!/bin/sh
|
||||||
|
|
||||||
|
# An example hook script to validate a patch (and/or patch series) before
|
||||||
|
# sending it via email.
|
||||||
|
#
|
||||||
|
# The hook should exit with non-zero status after issuing an appropriate
|
||||||
|
# message if it wants to prevent the email(s) from being sent.
|
||||||
|
#
|
||||||
|
# To enable this hook, rename this file to "sendemail-validate".
|
||||||
|
#
|
||||||
|
# By default, it will only check that the patch(es) can be applied on top of
|
||||||
|
# the default upstream branch without conflicts in a secondary worktree. After
|
||||||
|
# validation (successful or not) of the last patch of a series, the worktree
|
||||||
|
# will be deleted.
|
||||||
|
#
|
||||||
|
# The following config variables can be set to change the default remote and
|
||||||
|
# remote ref that are used to apply the patches against:
|
||||||
|
#
|
||||||
|
# sendemail.validateRemote (default: origin)
|
||||||
|
# sendemail.validateRemoteRef (default: HEAD)
|
||||||
|
#
|
||||||
|
# Replace the TODO placeholders with appropriate checks according to your
|
||||||
|
# needs.
|
||||||
|
|
||||||
|
validate_cover_letter () {
|
||||||
|
file="$1"
|
||||||
|
# TODO: Replace with appropriate checks (e.g. spell checking).
|
||||||
|
true
|
||||||
|
}
|
||||||
|
|
||||||
|
validate_patch () {
|
||||||
|
file="$1"
|
||||||
|
# Ensure that the patch applies without conflicts.
|
||||||
|
git am -3 "$file" || return
|
||||||
|
# TODO: Replace with appropriate checks for this patch
|
||||||
|
# (e.g. checkpatch.pl).
|
||||||
|
true
|
||||||
|
}
|
||||||
|
|
||||||
|
validate_series () {
|
||||||
|
# TODO: Replace with appropriate checks for the whole series
|
||||||
|
# (e.g. quick build, coding style checks, etc.).
|
||||||
|
true
|
||||||
|
}
|
||||||
|
|
||||||
|
# main -------------------------------------------------------------------------
|
||||||
|
|
||||||
|
if test "$GIT_SENDEMAIL_FILE_COUNTER" = 1
|
||||||
|
then
|
||||||
|
remote=$(git config --default origin --get sendemail.validateRemote) &&
|
||||||
|
ref=$(git config --default HEAD --get sendemail.validateRemoteRef) &&
|
||||||
|
worktree=$(mktemp --tmpdir -d sendemail-validate.XXXXXXX) &&
|
||||||
|
git worktree add -fd --checkout "$worktree" "refs/remotes/$remote/$ref" &&
|
||||||
|
git config --replace-all sendemail.validateWorktree "$worktree"
|
||||||
|
else
|
||||||
|
worktree=$(git config --get sendemail.validateWorktree)
|
||||||
|
fi || {
|
||||||
|
echo "sendemail-validate: error: failed to prepare worktree" >&2
|
||||||
|
exit 1
|
||||||
|
}
|
||||||
|
|
||||||
|
unset GIT_DIR GIT_WORK_TREE
|
||||||
|
cd "$worktree" &&
|
||||||
|
|
||||||
|
if grep -q "^diff --git " "$1"
|
||||||
|
then
|
||||||
|
validate_patch "$1"
|
||||||
|
else
|
||||||
|
validate_cover_letter "$1"
|
||||||
|
fi &&
|
||||||
|
|
||||||
|
if test "$GIT_SENDEMAIL_FILE_COUNTER" = "$GIT_SENDEMAIL_FILE_TOTAL"
|
||||||
|
then
|
||||||
|
git config --unset-all sendemail.validateWorktree &&
|
||||||
|
trap 'git worktree remove -ff "$worktree"' EXIT &&
|
||||||
|
validate_series
|
||||||
|
fi
|
||||||
15
forgejo_data/git/repositories/bast/my-app-sandbox.git/hooks/update
Executable file
15
forgejo_data/git/repositories/bast/my-app-sandbox.git/hooks/update
Executable file
|
|
@ -0,0 +1,15 @@
|
||||||
|
#!/usr/bin/env bash
|
||||||
|
# AUTO GENERATED BY GITEA, DO NOT MODIFY
|
||||||
|
exitcodes=""
|
||||||
|
hookname=$(basename $0)
|
||||||
|
GIT_DIR=${GIT_DIR:-$(dirname $0/..)}
|
||||||
|
|
||||||
|
for hook in ${GIT_DIR}/hooks/${hookname}.d/*; do
|
||||||
|
test -x "${hook}" && test -f "${hook}" || continue
|
||||||
|
"${hook}" $1 $2 $3
|
||||||
|
exitcodes="${exitcodes} $?"
|
||||||
|
done
|
||||||
|
|
||||||
|
for i in ${exitcodes}; do
|
||||||
|
[ ${i} -eq 0 ] || exit ${i}
|
||||||
|
done
|
||||||
|
|
@ -0,0 +1,3 @@
|
||||||
|
#!/usr/bin/env bash
|
||||||
|
# AUTO GENERATED BY GITEA, DO NOT MODIFY
|
||||||
|
/usr/local/bin/gitea hook --config=/data/gitea/conf/app.ini update $1 $2 $3
|
||||||
128
forgejo_data/git/repositories/bast/my-app-sandbox.git/hooks/update.sample
Executable file
128
forgejo_data/git/repositories/bast/my-app-sandbox.git/hooks/update.sample
Executable file
|
|
@ -0,0 +1,128 @@
|
||||||
|
#!/bin/sh
|
||||||
|
#
|
||||||
|
# An example hook script to block unannotated tags from entering.
|
||||||
|
# Called by "git receive-pack" with arguments: refname sha1-old sha1-new
|
||||||
|
#
|
||||||
|
# To enable this hook, rename this file to "update".
|
||||||
|
#
|
||||||
|
# Config
|
||||||
|
# ------
|
||||||
|
# hooks.allowunannotated
|
||||||
|
# This boolean sets whether unannotated tags will be allowed into the
|
||||||
|
# repository. By default they won't be.
|
||||||
|
# hooks.allowdeletetag
|
||||||
|
# This boolean sets whether deleting tags will be allowed in the
|
||||||
|
# repository. By default they won't be.
|
||||||
|
# hooks.allowmodifytag
|
||||||
|
# This boolean sets whether a tag may be modified after creation. By default
|
||||||
|
# it won't be.
|
||||||
|
# hooks.allowdeletebranch
|
||||||
|
# This boolean sets whether deleting branches will be allowed in the
|
||||||
|
# repository. By default they won't be.
|
||||||
|
# hooks.denycreatebranch
|
||||||
|
# This boolean sets whether remotely creating branches will be denied
|
||||||
|
# in the repository. By default this is allowed.
|
||||||
|
#
|
||||||
|
|
||||||
|
# --- Command line
|
||||||
|
refname="$1"
|
||||||
|
oldrev="$2"
|
||||||
|
newrev="$3"
|
||||||
|
|
||||||
|
# --- Safety check
|
||||||
|
if [ -z "$GIT_DIR" ]; then
|
||||||
|
echo "Don't run this script from the command line." >&2
|
||||||
|
echo " (if you want, you could supply GIT_DIR then run" >&2
|
||||||
|
echo " $0 <ref> <oldrev> <newrev>)" >&2
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ -z "$refname" -o -z "$oldrev" -o -z "$newrev" ]; then
|
||||||
|
echo "usage: $0 <ref> <oldrev> <newrev>" >&2
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
# --- Config
|
||||||
|
allowunannotated=$(git config --type=bool hooks.allowunannotated)
|
||||||
|
allowdeletebranch=$(git config --type=bool hooks.allowdeletebranch)
|
||||||
|
denycreatebranch=$(git config --type=bool hooks.denycreatebranch)
|
||||||
|
allowdeletetag=$(git config --type=bool hooks.allowdeletetag)
|
||||||
|
allowmodifytag=$(git config --type=bool hooks.allowmodifytag)
|
||||||
|
|
||||||
|
# check for no description
|
||||||
|
projectdesc=$(sed -e '1q' "$GIT_DIR/description")
|
||||||
|
case "$projectdesc" in
|
||||||
|
"Unnamed repository"* | "")
|
||||||
|
echo "*** Project description file hasn't been set" >&2
|
||||||
|
exit 1
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
|
||||||
|
# --- Check types
|
||||||
|
# if $newrev is 0000...0000, it's a commit to delete a ref.
|
||||||
|
zero=$(git hash-object --stdin </dev/null | tr '[0-9a-f]' '0')
|
||||||
|
if [ "$newrev" = "$zero" ]; then
|
||||||
|
newrev_type=delete
|
||||||
|
else
|
||||||
|
newrev_type=$(git cat-file -t $newrev)
|
||||||
|
fi
|
||||||
|
|
||||||
|
case "$refname","$newrev_type" in
|
||||||
|
refs/tags/*,commit)
|
||||||
|
# un-annotated tag
|
||||||
|
short_refname=${refname##refs/tags/}
|
||||||
|
if [ "$allowunannotated" != "true" ]; then
|
||||||
|
echo "*** The un-annotated tag, $short_refname, is not allowed in this repository" >&2
|
||||||
|
echo "*** Use 'git tag [ -a | -s ]' for tags you want to propagate." >&2
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
;;
|
||||||
|
refs/tags/*,delete)
|
||||||
|
# delete tag
|
||||||
|
if [ "$allowdeletetag" != "true" ]; then
|
||||||
|
echo "*** Deleting a tag is not allowed in this repository" >&2
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
;;
|
||||||
|
refs/tags/*,tag)
|
||||||
|
# annotated tag
|
||||||
|
if [ "$allowmodifytag" != "true" ] && git rev-parse $refname > /dev/null 2>&1
|
||||||
|
then
|
||||||
|
echo "*** Tag '$refname' already exists." >&2
|
||||||
|
echo "*** Modifying a tag is not allowed in this repository." >&2
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
;;
|
||||||
|
refs/heads/*,commit)
|
||||||
|
# branch
|
||||||
|
if [ "$oldrev" = "$zero" -a "$denycreatebranch" = "true" ]; then
|
||||||
|
echo "*** Creating a branch is not allowed in this repository" >&2
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
;;
|
||||||
|
refs/heads/*,delete)
|
||||||
|
# delete branch
|
||||||
|
if [ "$allowdeletebranch" != "true" ]; then
|
||||||
|
echo "*** Deleting a branch is not allowed in this repository" >&2
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
;;
|
||||||
|
refs/remotes/*,commit)
|
||||||
|
# tracking branch
|
||||||
|
;;
|
||||||
|
refs/remotes/*,delete)
|
||||||
|
# delete tracking branch
|
||||||
|
if [ "$allowdeletebranch" != "true" ]; then
|
||||||
|
echo "*** Deleting a tracking branch is not allowed in this repository" >&2
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
# Anything else (is there anything else?)
|
||||||
|
echo "*** Update hook: unknown type of update to ref $refname of type $newrev_type" >&2
|
||||||
|
exit 1
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
|
||||||
|
# --- Finished
|
||||||
|
exit 0
|
||||||
|
|
@ -0,0 +1,6 @@
|
||||||
|
# git ls-files --others --exclude-from=.git/info/exclude
|
||||||
|
# Lines that start with '#' are comments.
|
||||||
|
# For a project mostly in C, the following would be a good set of
|
||||||
|
# exclude patterns (uncomment them if you want to use them):
|
||||||
|
# *.[oa]
|
||||||
|
# *~
|
||||||
|
|
@ -0,0 +1 @@
|
||||||
|
fd95cacac9e62cc366f5a34a4a3e6dea1e59b307 refs/heads/main
|
||||||
|
|
@ -0,0 +1,71 @@
|
||||||
|
0000000000000000000000000000000000000000 96b28b7d5f913e6e7bee08e44244b5a9c217a0e4 bast <bast@bast.li> 1793408504 +0000 push
|
||||||
|
96b28b7d5f913e6e7bee08e44244b5a9c217a0e4 f474e73e4a9abd4e6505a3d6e7650e30ae677033 bast <bast@bast.li> 1793408544 +0000 push
|
||||||
|
f474e73e4a9abd4e6505a3d6e7650e30ae677033 436f305e890eca87eec9b9e5235b5f94fab704a9 bast <bast@bast.li> 1793408587 +0000 push
|
||||||
|
436f305e890eca87eec9b9e5235b5f94fab704a9 f9c8aac58b23bfa326bdc29651a7105e0489b03c bast <bast@bast.li> 1793409899 +0000 push
|
||||||
|
f9c8aac58b23bfa326bdc29651a7105e0489b03c 8a14b9edafd6936fb43914d3daebbdccc8ffe7ec bast <bast@bast.li> 1793410100 +0000 push
|
||||||
|
8a14b9edafd6936fb43914d3daebbdccc8ffe7ec 6b55d6d80a413b362b6153d639c1d173738fb488 bast <bast@bast.li> 1793410432 +0000 push
|
||||||
|
6b55d6d80a413b362b6153d639c1d173738fb488 ff1f80558f7d37289744301bc23ceeb2bdd34c8b bast <bast@bast.li> 1793410656 +0000 push
|
||||||
|
ff1f80558f7d37289744301bc23ceeb2bdd34c8b 47b7c600caa2bb0b2b5cec65cc79ad4c7fea32a8 bast <bast@bast.li> 1793410743 +0000 push
|
||||||
|
47b7c600caa2bb0b2b5cec65cc79ad4c7fea32a8 24e466eb9b82f21d529e20ee07f2c1358520f0b4 bast <bast@bast.li> 1793411271 +0000 push
|
||||||
|
24e466eb9b82f21d529e20ee07f2c1358520f0b4 9bfb3eeaae16e69ebb7f017e6a0023e1369ac976 bast <bast@bast.li> 1793411697 +0000 push
|
||||||
|
9bfb3eeaae16e69ebb7f017e6a0023e1369ac976 5b6a70e1e5a6738932694adcbc7d6939eaa82aa7 bast <bast@bast.li> 1793411824 +0000 push
|
||||||
|
5b6a70e1e5a6738932694adcbc7d6939eaa82aa7 f9ca43ce6e100066e8efe2296f46602208e0f694 bast <bast@bast.li> 1793411930 +0000 push
|
||||||
|
f9ca43ce6e100066e8efe2296f46602208e0f694 8dfadac5f8b3baf47f3ca09699328600d6dca567 bast <bast@bast.li> 1793412046 +0000 push
|
||||||
|
8dfadac5f8b3baf47f3ca09699328600d6dca567 88e8e908bbdc97ed4b3474052c0fddd515f21dfc bast <bast@bast.li> 1793412349 +0000 push
|
||||||
|
88e8e908bbdc97ed4b3474052c0fddd515f21dfc 91aa7e81a1965dfd2e437e1d0ea2fa3c2e4fee30 bast <bast@bast.li> 1793412841 +0000 push
|
||||||
|
91aa7e81a1965dfd2e437e1d0ea2fa3c2e4fee30 5580938179da03c1ed5d54317d61cda2380a8a42 bast <bast@bast.li> 1793413199 +0000 push
|
||||||
|
5580938179da03c1ed5d54317d61cda2380a8a42 14dbe0fcbc9574c8653143152d9e8d072a655707 Gitea <gitea@fake.local> 1793413389 +0000 push
|
||||||
|
14dbe0fcbc9574c8653143152d9e8d072a655707 bda3fb7bb81779a71713e85ef82490fb7f168cfd bast <bast@bast.li> 1793413806 +0000 push
|
||||||
|
bda3fb7bb81779a71713e85ef82490fb7f168cfd df313071ef467f3ea44ea58efe64fe31c6f92d13 bast <bast@bast.li> 1793414937 +0000 push
|
||||||
|
df313071ef467f3ea44ea58efe64fe31c6f92d13 a098b389fa4821d5bedc191bbbe40f9284fe86f1 bast <bast@bast.li> 1793415086 +0000 push
|
||||||
|
a098b389fa4821d5bedc191bbbe40f9284fe86f1 73cf13db7280fb9c49e7b90e3dc00c73c64a9362 bast <bast@bast.li> 1793415192 +0000 push
|
||||||
|
73cf13db7280fb9c49e7b90e3dc00c73c64a9362 d6ada2d427beab4e426fc1e66eceb0062abaa399 bast <bast@bast.li> 1793454266 +0000 push
|
||||||
|
d6ada2d427beab4e426fc1e66eceb0062abaa399 f1e9a1033a5413b8c1bdbf10034fabcae43312d0 bast <bast@bast.li> 1793454568 +0000 push
|
||||||
|
f1e9a1033a5413b8c1bdbf10034fabcae43312d0 1a663b0d179474904725105c48b3a44fe70daa08 bast <bast@bast.li> 1793454877 +0000 push
|
||||||
|
1a663b0d179474904725105c48b3a44fe70daa08 79a14bfd7e45bc12bc42987cf298d390b9dfa355 bast <bast@bast.li> 1793455123 +0000 push
|
||||||
|
79a14bfd7e45bc12bc42987cf298d390b9dfa355 4f04c57b878b32b5a22ee93eeba03a1b5de7a5f1 bast <bast@bast.li> 1793455224 +0000 push
|
||||||
|
4f04c57b878b32b5a22ee93eeba03a1b5de7a5f1 c7937564732e85cabeee199a033ff752923b9f9d bast <bast@bast.li> 1793455385 +0000 push
|
||||||
|
c7937564732e85cabeee199a033ff752923b9f9d 37da30ccd1a8a184b0d5550a763b98a03ec80fb3 bast <bast@bast.li> 1793455422 +0000 push
|
||||||
|
37da30ccd1a8a184b0d5550a763b98a03ec80fb3 849fbc24bea99a29b2dd15c1d96d24a5072d09e3 Gitea <gitea@fake.local> 1793456434 +0000 push
|
||||||
|
849fbc24bea99a29b2dd15c1d96d24a5072d09e3 a5daa7bbc4f2ad15bf79bf4ebcb4591dab4e4916 bast <bast@bast.li> 1793456492 +0000 push
|
||||||
|
a5daa7bbc4f2ad15bf79bf4ebcb4591dab4e4916 f4164f9a15da2e8f5efd1233cd57c621658bdd26 bast <bast@bast.li> 1793456755 +0000 push
|
||||||
|
f4164f9a15da2e8f5efd1233cd57c621658bdd26 8f2915f3490d70e44c2acfc7b4afea7b6bb91227 bast <bast@bast.li> 1793457021 +0000 push
|
||||||
|
8f2915f3490d70e44c2acfc7b4afea7b6bb91227 89034214594a8f805fb22765f6c8c3d4c8432993 bast <bast@bast.li> 1793458003 +0000 push
|
||||||
|
89034214594a8f805fb22765f6c8c3d4c8432993 be5ae9ce40592cdc6a98591248e45c6219c896c1 bast <bast@bast.li> 1793458845 +0000 push
|
||||||
|
be5ae9ce40592cdc6a98591248e45c6219c896c1 0157a906ec2adc6574902a4b868eb1a14b6e7fd1 bast <bast@bast.li> 1793459140 +0000 push
|
||||||
|
0157a906ec2adc6574902a4b868eb1a14b6e7fd1 fd1c9dc97b9009132ef7cf222075b0fe532e21ea bast <bast@bast.li> 1793460429 +0000 push
|
||||||
|
fd1c9dc97b9009132ef7cf222075b0fe532e21ea d1c3addfa3d638700bcbd39e650f80b4c7e5cf47 bast <bast@bast.li> 1793460913 +0000 push
|
||||||
|
d1c3addfa3d638700bcbd39e650f80b4c7e5cf47 47a21c29142496591a88a791ee792adccca52c2b bast <bast@bast.li> 1793461230 +0000 push
|
||||||
|
47a21c29142496591a88a791ee792adccca52c2b d2082d161b497f6c9c783946998db78840a36987 bast <bast@bast.li> 1793461787 +0000 push
|
||||||
|
d2082d161b497f6c9c783946998db78840a36987 4559abd5a391705dbf1c18c8f69e37b8c4efcc8d bast <bast@bast.li> 1793461945 +0000 push
|
||||||
|
4559abd5a391705dbf1c18c8f69e37b8c4efcc8d c150c7e2b8be588483db38c3feb4ccaaf9809853 bast <bast@bast.li> 1793462170 +0000 push
|
||||||
|
c150c7e2b8be588483db38c3feb4ccaaf9809853 6fdab5d48bf4aaf12f1279368f7a3395abd10e1a bast <bast@bast.li> 1793462207 +0000 push
|
||||||
|
6fdab5d48bf4aaf12f1279368f7a3395abd10e1a cbd87b5bd32aa9444f6bb0b3ba4cc328f664b2a4 bast <bast@bast.li> 1793462645 +0000 push
|
||||||
|
cbd87b5bd32aa9444f6bb0b3ba4cc328f664b2a4 5e41d17bda0b6a286f98ba183e7a179b69ab4fb9 bast <bast@bast.li> 1793462717 +0000 push
|
||||||
|
5e41d17bda0b6a286f98ba183e7a179b69ab4fb9 f9eb2b1f55ec0e526bf590bfb7b63da47ce34942 bast <bast@bast.li> 1793462858 +0000 push
|
||||||
|
f9eb2b1f55ec0e526bf590bfb7b63da47ce34942 40aef2135c1520e41d9b0f56a9a2ecb8400bce91 bast <bast@bast.li> 1793463138 +0000 push
|
||||||
|
40aef2135c1520e41d9b0f56a9a2ecb8400bce91 0a3951a598999f6d4da54c1162239c0dda138bdd bast <bast@bast.li> 1793463178 +0000 push
|
||||||
|
0a3951a598999f6d4da54c1162239c0dda138bdd 8657b2c097c7143237764ebe8663ba749e14df4f bast <bast@bast.li> 1793463457 +0000 push
|
||||||
|
8657b2c097c7143237764ebe8663ba749e14df4f 9f14697670eff72922becc88af35b6e9c6140e54 bast <bast@bast.li> 1793463508 +0000 push
|
||||||
|
9f14697670eff72922becc88af35b6e9c6140e54 2ac0d9683247836e7f4159be7f91931eb111bd6d bast <bast@bast.li> 1793464466 +0000 push
|
||||||
|
2ac0d9683247836e7f4159be7f91931eb111bd6d d4f3c42b50b0a38c53164fe77f801911aec4ee8b bast <bast@bast.li> 1793465121 +0000 push
|
||||||
|
d4f3c42b50b0a38c53164fe77f801911aec4ee8b 329fd61275999ad856fff688c3fc03a77aafb51d bast <bast@bast.li> 1793465481 +0000 push
|
||||||
|
329fd61275999ad856fff688c3fc03a77aafb51d 6040bdef7aca332d0a5c649ebcd0a381871847ee bast <bast@bast.li> 1793465685 +0000 push
|
||||||
|
6040bdef7aca332d0a5c649ebcd0a381871847ee f4b3c63a49b87081b0ce2fe4a9cecba8b0eb6771 bast <bast@bast.li> 1793465851 +0000 push
|
||||||
|
f4b3c63a49b87081b0ce2fe4a9cecba8b0eb6771 5d0955e5f880ec86830cdc866d3028b72eb5f1c4 bast <bast@bast.li> 1793466138 +0000 push
|
||||||
|
5d0955e5f880ec86830cdc866d3028b72eb5f1c4 3570d7166da33c2b1aebcc15db3af776aebc3728 bast <bast@bast.li> 1793466193 +0000 push
|
||||||
|
3570d7166da33c2b1aebcc15db3af776aebc3728 bc8d850ebfaa0c542011ec8b39d9d4058c423049 bast <bast@bast.li> 1793466536 +0000 push
|
||||||
|
bc8d850ebfaa0c542011ec8b39d9d4058c423049 33e2af9df33f80162fffec24ba33777a9c12cd94 bast <bast@bast.li> 1793466822 +0000 push
|
||||||
|
33e2af9df33f80162fffec24ba33777a9c12cd94 dbf497aaabe5c60f119225b51803f83abd410f49 bast <bast@bast.li> 1793467057 +0000 push
|
||||||
|
dbf497aaabe5c60f119225b51803f83abd410f49 ec7e767e0a1469fa88c920e1cf6e1477b6cb96c1 bast <bast@bast.li> 1793467095 +0000 push
|
||||||
|
ec7e767e0a1469fa88c920e1cf6e1477b6cb96c1 c3105db3f58c0fdf82be0eb0802be351b9e7e6fd bast <bast@bast.li> 1793467185 +0000 push
|
||||||
|
c3105db3f58c0fdf82be0eb0802be351b9e7e6fd a5e8f57abf8b7635e830a80bf73ccc82bb6b13fb bast <bast@bast.li> 1793468332 +0000 push
|
||||||
|
a5e8f57abf8b7635e830a80bf73ccc82bb6b13fb e22f21eb9986edfb9f9085af25ffe11f04094d2c bast <bast@bast.li> 1793468574 +0000 push
|
||||||
|
e22f21eb9986edfb9f9085af25ffe11f04094d2c ef01ee42f1f90ac736dacf7e928ac11af887b894 bast <bast@bast.li> 1793468826 +0000 push
|
||||||
|
ef01ee42f1f90ac736dacf7e928ac11af887b894 86ed12f4dd29e282bd5554c3e7c987d2030d18ed bast <bast@bast.li> 1793472528 +0000 push
|
||||||
|
86ed12f4dd29e282bd5554c3e7c987d2030d18ed 6339aa64962af6356ca0717a9814b6976cf09ace bast <bast@bast.li> 1793472685 +0000 push
|
||||||
|
6339aa64962af6356ca0717a9814b6976cf09ace 8286920606fa046ae65bb94e9d328304bc57f77e bast <bast@bast.li> 1793473001 +0000 push
|
||||||
|
8286920606fa046ae65bb94e9d328304bc57f77e dff418fc4ae9076f04bdd5cc6bd8322e7028672f bast <bast@bast.li> 1793473047 +0000 push
|
||||||
|
dff418fc4ae9076f04bdd5cc6bd8322e7028672f 08633710b48d6b8bc20620f584aebe17f817b83b bast <bast@bast.li> 1793473123 +0000 push
|
||||||
|
08633710b48d6b8bc20620f584aebe17f817b83b b1356362d060b79af4cf76d45068a5d2a6eed768 bast <bast@bast.li> 1793473539 +0000 push
|
||||||
|
b1356362d060b79af4cf76d45068a5d2a6eed768 fd95cacac9e62cc366f5a34a4a3e6dea1e59b307 bast <bast@bast.li> 1793473883 +0000 push
|
||||||
|
|
@ -0,0 +1,71 @@
|
||||||
|
0000000000000000000000000000000000000000 96b28b7d5f913e6e7bee08e44244b5a9c217a0e4 bast <bast@bast.li> 1793408504 +0000 push
|
||||||
|
96b28b7d5f913e6e7bee08e44244b5a9c217a0e4 f474e73e4a9abd4e6505a3d6e7650e30ae677033 bast <bast@bast.li> 1793408544 +0000 push
|
||||||
|
f474e73e4a9abd4e6505a3d6e7650e30ae677033 436f305e890eca87eec9b9e5235b5f94fab704a9 bast <bast@bast.li> 1793408587 +0000 push
|
||||||
|
436f305e890eca87eec9b9e5235b5f94fab704a9 f9c8aac58b23bfa326bdc29651a7105e0489b03c bast <bast@bast.li> 1793409899 +0000 push
|
||||||
|
f9c8aac58b23bfa326bdc29651a7105e0489b03c 8a14b9edafd6936fb43914d3daebbdccc8ffe7ec bast <bast@bast.li> 1793410100 +0000 push
|
||||||
|
8a14b9edafd6936fb43914d3daebbdccc8ffe7ec 6b55d6d80a413b362b6153d639c1d173738fb488 bast <bast@bast.li> 1793410432 +0000 push
|
||||||
|
6b55d6d80a413b362b6153d639c1d173738fb488 ff1f80558f7d37289744301bc23ceeb2bdd34c8b bast <bast@bast.li> 1793410656 +0000 push
|
||||||
|
ff1f80558f7d37289744301bc23ceeb2bdd34c8b 47b7c600caa2bb0b2b5cec65cc79ad4c7fea32a8 bast <bast@bast.li> 1793410743 +0000 push
|
||||||
|
47b7c600caa2bb0b2b5cec65cc79ad4c7fea32a8 24e466eb9b82f21d529e20ee07f2c1358520f0b4 bast <bast@bast.li> 1793411271 +0000 push
|
||||||
|
24e466eb9b82f21d529e20ee07f2c1358520f0b4 9bfb3eeaae16e69ebb7f017e6a0023e1369ac976 bast <bast@bast.li> 1793411697 +0000 push
|
||||||
|
9bfb3eeaae16e69ebb7f017e6a0023e1369ac976 5b6a70e1e5a6738932694adcbc7d6939eaa82aa7 bast <bast@bast.li> 1793411824 +0000 push
|
||||||
|
5b6a70e1e5a6738932694adcbc7d6939eaa82aa7 f9ca43ce6e100066e8efe2296f46602208e0f694 bast <bast@bast.li> 1793411930 +0000 push
|
||||||
|
f9ca43ce6e100066e8efe2296f46602208e0f694 8dfadac5f8b3baf47f3ca09699328600d6dca567 bast <bast@bast.li> 1793412046 +0000 push
|
||||||
|
8dfadac5f8b3baf47f3ca09699328600d6dca567 88e8e908bbdc97ed4b3474052c0fddd515f21dfc bast <bast@bast.li> 1793412349 +0000 push
|
||||||
|
88e8e908bbdc97ed4b3474052c0fddd515f21dfc 91aa7e81a1965dfd2e437e1d0ea2fa3c2e4fee30 bast <bast@bast.li> 1793412841 +0000 push
|
||||||
|
91aa7e81a1965dfd2e437e1d0ea2fa3c2e4fee30 5580938179da03c1ed5d54317d61cda2380a8a42 bast <bast@bast.li> 1793413199 +0000 push
|
||||||
|
5580938179da03c1ed5d54317d61cda2380a8a42 14dbe0fcbc9574c8653143152d9e8d072a655707 Gitea <gitea@fake.local> 1793413389 +0000 push
|
||||||
|
14dbe0fcbc9574c8653143152d9e8d072a655707 bda3fb7bb81779a71713e85ef82490fb7f168cfd bast <bast@bast.li> 1793413806 +0000 push
|
||||||
|
bda3fb7bb81779a71713e85ef82490fb7f168cfd df313071ef467f3ea44ea58efe64fe31c6f92d13 bast <bast@bast.li> 1793414937 +0000 push
|
||||||
|
df313071ef467f3ea44ea58efe64fe31c6f92d13 a098b389fa4821d5bedc191bbbe40f9284fe86f1 bast <bast@bast.li> 1793415086 +0000 push
|
||||||
|
a098b389fa4821d5bedc191bbbe40f9284fe86f1 73cf13db7280fb9c49e7b90e3dc00c73c64a9362 bast <bast@bast.li> 1793415192 +0000 push
|
||||||
|
73cf13db7280fb9c49e7b90e3dc00c73c64a9362 d6ada2d427beab4e426fc1e66eceb0062abaa399 bast <bast@bast.li> 1793454266 +0000 push
|
||||||
|
d6ada2d427beab4e426fc1e66eceb0062abaa399 f1e9a1033a5413b8c1bdbf10034fabcae43312d0 bast <bast@bast.li> 1793454568 +0000 push
|
||||||
|
f1e9a1033a5413b8c1bdbf10034fabcae43312d0 1a663b0d179474904725105c48b3a44fe70daa08 bast <bast@bast.li> 1793454877 +0000 push
|
||||||
|
1a663b0d179474904725105c48b3a44fe70daa08 79a14bfd7e45bc12bc42987cf298d390b9dfa355 bast <bast@bast.li> 1793455123 +0000 push
|
||||||
|
79a14bfd7e45bc12bc42987cf298d390b9dfa355 4f04c57b878b32b5a22ee93eeba03a1b5de7a5f1 bast <bast@bast.li> 1793455224 +0000 push
|
||||||
|
4f04c57b878b32b5a22ee93eeba03a1b5de7a5f1 c7937564732e85cabeee199a033ff752923b9f9d bast <bast@bast.li> 1793455385 +0000 push
|
||||||
|
c7937564732e85cabeee199a033ff752923b9f9d 37da30ccd1a8a184b0d5550a763b98a03ec80fb3 bast <bast@bast.li> 1793455422 +0000 push
|
||||||
|
37da30ccd1a8a184b0d5550a763b98a03ec80fb3 849fbc24bea99a29b2dd15c1d96d24a5072d09e3 Gitea <gitea@fake.local> 1793456434 +0000 push
|
||||||
|
849fbc24bea99a29b2dd15c1d96d24a5072d09e3 a5daa7bbc4f2ad15bf79bf4ebcb4591dab4e4916 bast <bast@bast.li> 1793456492 +0000 push
|
||||||
|
a5daa7bbc4f2ad15bf79bf4ebcb4591dab4e4916 f4164f9a15da2e8f5efd1233cd57c621658bdd26 bast <bast@bast.li> 1793456755 +0000 push
|
||||||
|
f4164f9a15da2e8f5efd1233cd57c621658bdd26 8f2915f3490d70e44c2acfc7b4afea7b6bb91227 bast <bast@bast.li> 1793457021 +0000 push
|
||||||
|
8f2915f3490d70e44c2acfc7b4afea7b6bb91227 89034214594a8f805fb22765f6c8c3d4c8432993 bast <bast@bast.li> 1793458003 +0000 push
|
||||||
|
89034214594a8f805fb22765f6c8c3d4c8432993 be5ae9ce40592cdc6a98591248e45c6219c896c1 bast <bast@bast.li> 1793458845 +0000 push
|
||||||
|
be5ae9ce40592cdc6a98591248e45c6219c896c1 0157a906ec2adc6574902a4b868eb1a14b6e7fd1 bast <bast@bast.li> 1793459140 +0000 push
|
||||||
|
0157a906ec2adc6574902a4b868eb1a14b6e7fd1 fd1c9dc97b9009132ef7cf222075b0fe532e21ea bast <bast@bast.li> 1793460429 +0000 push
|
||||||
|
fd1c9dc97b9009132ef7cf222075b0fe532e21ea d1c3addfa3d638700bcbd39e650f80b4c7e5cf47 bast <bast@bast.li> 1793460913 +0000 push
|
||||||
|
d1c3addfa3d638700bcbd39e650f80b4c7e5cf47 47a21c29142496591a88a791ee792adccca52c2b bast <bast@bast.li> 1793461230 +0000 push
|
||||||
|
47a21c29142496591a88a791ee792adccca52c2b d2082d161b497f6c9c783946998db78840a36987 bast <bast@bast.li> 1793461787 +0000 push
|
||||||
|
d2082d161b497f6c9c783946998db78840a36987 4559abd5a391705dbf1c18c8f69e37b8c4efcc8d bast <bast@bast.li> 1793461945 +0000 push
|
||||||
|
4559abd5a391705dbf1c18c8f69e37b8c4efcc8d c150c7e2b8be588483db38c3feb4ccaaf9809853 bast <bast@bast.li> 1793462170 +0000 push
|
||||||
|
c150c7e2b8be588483db38c3feb4ccaaf9809853 6fdab5d48bf4aaf12f1279368f7a3395abd10e1a bast <bast@bast.li> 1793462207 +0000 push
|
||||||
|
6fdab5d48bf4aaf12f1279368f7a3395abd10e1a cbd87b5bd32aa9444f6bb0b3ba4cc328f664b2a4 bast <bast@bast.li> 1793462645 +0000 push
|
||||||
|
cbd87b5bd32aa9444f6bb0b3ba4cc328f664b2a4 5e41d17bda0b6a286f98ba183e7a179b69ab4fb9 bast <bast@bast.li> 1793462717 +0000 push
|
||||||
|
5e41d17bda0b6a286f98ba183e7a179b69ab4fb9 f9eb2b1f55ec0e526bf590bfb7b63da47ce34942 bast <bast@bast.li> 1793462858 +0000 push
|
||||||
|
f9eb2b1f55ec0e526bf590bfb7b63da47ce34942 40aef2135c1520e41d9b0f56a9a2ecb8400bce91 bast <bast@bast.li> 1793463138 +0000 push
|
||||||
|
40aef2135c1520e41d9b0f56a9a2ecb8400bce91 0a3951a598999f6d4da54c1162239c0dda138bdd bast <bast@bast.li> 1793463178 +0000 push
|
||||||
|
0a3951a598999f6d4da54c1162239c0dda138bdd 8657b2c097c7143237764ebe8663ba749e14df4f bast <bast@bast.li> 1793463457 +0000 push
|
||||||
|
8657b2c097c7143237764ebe8663ba749e14df4f 9f14697670eff72922becc88af35b6e9c6140e54 bast <bast@bast.li> 1793463508 +0000 push
|
||||||
|
9f14697670eff72922becc88af35b6e9c6140e54 2ac0d9683247836e7f4159be7f91931eb111bd6d bast <bast@bast.li> 1793464466 +0000 push
|
||||||
|
2ac0d9683247836e7f4159be7f91931eb111bd6d d4f3c42b50b0a38c53164fe77f801911aec4ee8b bast <bast@bast.li> 1793465121 +0000 push
|
||||||
|
d4f3c42b50b0a38c53164fe77f801911aec4ee8b 329fd61275999ad856fff688c3fc03a77aafb51d bast <bast@bast.li> 1793465481 +0000 push
|
||||||
|
329fd61275999ad856fff688c3fc03a77aafb51d 6040bdef7aca332d0a5c649ebcd0a381871847ee bast <bast@bast.li> 1793465685 +0000 push
|
||||||
|
6040bdef7aca332d0a5c649ebcd0a381871847ee f4b3c63a49b87081b0ce2fe4a9cecba8b0eb6771 bast <bast@bast.li> 1793465851 +0000 push
|
||||||
|
f4b3c63a49b87081b0ce2fe4a9cecba8b0eb6771 5d0955e5f880ec86830cdc866d3028b72eb5f1c4 bast <bast@bast.li> 1793466138 +0000 push
|
||||||
|
5d0955e5f880ec86830cdc866d3028b72eb5f1c4 3570d7166da33c2b1aebcc15db3af776aebc3728 bast <bast@bast.li> 1793466193 +0000 push
|
||||||
|
3570d7166da33c2b1aebcc15db3af776aebc3728 bc8d850ebfaa0c542011ec8b39d9d4058c423049 bast <bast@bast.li> 1793466536 +0000 push
|
||||||
|
bc8d850ebfaa0c542011ec8b39d9d4058c423049 33e2af9df33f80162fffec24ba33777a9c12cd94 bast <bast@bast.li> 1793466822 +0000 push
|
||||||
|
33e2af9df33f80162fffec24ba33777a9c12cd94 dbf497aaabe5c60f119225b51803f83abd410f49 bast <bast@bast.li> 1793467057 +0000 push
|
||||||
|
dbf497aaabe5c60f119225b51803f83abd410f49 ec7e767e0a1469fa88c920e1cf6e1477b6cb96c1 bast <bast@bast.li> 1793467095 +0000 push
|
||||||
|
ec7e767e0a1469fa88c920e1cf6e1477b6cb96c1 c3105db3f58c0fdf82be0eb0802be351b9e7e6fd bast <bast@bast.li> 1793467185 +0000 push
|
||||||
|
c3105db3f58c0fdf82be0eb0802be351b9e7e6fd a5e8f57abf8b7635e830a80bf73ccc82bb6b13fb bast <bast@bast.li> 1793468332 +0000 push
|
||||||
|
a5e8f57abf8b7635e830a80bf73ccc82bb6b13fb e22f21eb9986edfb9f9085af25ffe11f04094d2c bast <bast@bast.li> 1793468574 +0000 push
|
||||||
|
e22f21eb9986edfb9f9085af25ffe11f04094d2c ef01ee42f1f90ac736dacf7e928ac11af887b894 bast <bast@bast.li> 1793468826 +0000 push
|
||||||
|
ef01ee42f1f90ac736dacf7e928ac11af887b894 86ed12f4dd29e282bd5554c3e7c987d2030d18ed bast <bast@bast.li> 1793472528 +0000 push
|
||||||
|
86ed12f4dd29e282bd5554c3e7c987d2030d18ed 6339aa64962af6356ca0717a9814b6976cf09ace bast <bast@bast.li> 1793472685 +0000 push
|
||||||
|
6339aa64962af6356ca0717a9814b6976cf09ace 8286920606fa046ae65bb94e9d328304bc57f77e bast <bast@bast.li> 1793473001 +0000 push
|
||||||
|
8286920606fa046ae65bb94e9d328304bc57f77e dff418fc4ae9076f04bdd5cc6bd8322e7028672f bast <bast@bast.li> 1793473047 +0000 push
|
||||||
|
dff418fc4ae9076f04bdd5cc6bd8322e7028672f 08633710b48d6b8bc20620f584aebe17f817b83b bast <bast@bast.li> 1793473123 +0000 push
|
||||||
|
08633710b48d6b8bc20620f584aebe17f817b83b b1356362d060b79af4cf76d45068a5d2a6eed768 bast <bast@bast.li> 1793473539 +0000 push
|
||||||
|
b1356362d060b79af4cf76d45068a5d2a6eed768 fd95cacac9e62cc366f5a34a4a3e6dea1e59b307 bast <bast@bast.li> 1793473883 +0000 push
|
||||||
Binary file not shown.
|
|
@ -0,0 +1,4 @@
|
||||||
|
xŤŽAŽÂ0EgťSd?R©Ý¤KÍU\×@DJPę
|
||||||
|
qű)sţâ-ľŢ—ľÔeÉćÓ—5UO<08>
|
||||||
|
”X$ÍŔ牣¤Ä(q Ńq
|
||||||
|
îÁMďć'Ť¬{úH(łŚL)`H˘Ś$‰FÇ›]kóŻćŹoţľŃ•|ňđCCŘGˇ÷ßý'˙§L?Ô]wÉvݦó¶ŰąÔçz<C3A7>őQę«{-ĹóÍ6.yÍÚĚýńÁHČ
|
||||||
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
|
|
@ -0,0 +1 @@
|
||||||
|
x+)JMU0カ`040031QHI-ネノッヤォフヘa<EFBE8D>セコnョgマコサ\qノ?俔Jヒ頚hカ
|
||||||
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Some files were not shown because too many files have changed in this diff Show more
Loading…
Reference in a new issue