build

__swarm/semaphore/.env

@@ -0,0 +1,3 @@
+APPNAME=semaphore
+DOCKER_REGISTRY=r.sectorq.eu/library/
+RESTART=always

__swarm/semaphore/config.conf

@@ -0,0 +1,29 @@
+{
+        "mysql": {
+                "host": "db:3306",
+                "user": "semaphore_user",
+                "pass": "StrongPassw0rd",
+                "name": "semaphore_db"
+        },
+        "dialect": "mysql",
+        "tmp_path": "/tmp/semaphore",
+        "cookie_hash": "mWjb9iAV2NMjvwyeS02kZysD/mEAX3pSiKLFQnrT7Z0=",
+        "cookie_encryption": "nnNaB+gZtrjr1z5xPfsq58zGtwcvtIHVm4g5LUeOEEY=",
+        "access_key_encryption": "bdEQwjNhSqXOtdd5eLG/BMn7hpIVftaobmyCQDyyQNE=",
+
+  "oidc_providers": {
+    "authentik": {
+      "display_name": "Sign in with MySSO",
+      "color": "orange",
+      "icon": "login",
+      "provider_url": "https://auth.sectorq.eu/application/o/semaphore/",
+      "client_id": "qQ377Vp5RZ7kGsaYOvKVJE7gFGozip7vwwsD5Kgg",
+      "client_secret": "Tf5h54NnevOwo9QvlhOTAeo7xpsrQjrXYCqMLZwiAhQ6bthX9qydUNsrEMWVOTQ7uBfQw2piHmmYmm5uYSTLa4SGi8TkT03OvsMeAotwXo3me9gYMgIAMk464lVGA2XM",
+      "redirect_url": "https://semaphore.sectorq.eu/api/auth/oidc/authentik/redirect/",
+      "scopes": ["openid", "profile", "email"],
+      "username_claim": "preferred_username",
+      "name_claim": "preferred_username"
+    }
+  }
+
+ }

__swarm/semaphore/docker-compose.yml

@@ -0,0 +1,53 @@
+services:
+  app:
+    depends_on:
+    - db
+    dns:
+    - 192.168.77.101
+    - 192.168.77.1
+    environment:
+      SEMAPHORE_ACCESS_KEY_ENCRYPTION: MflCLIUF5bn6Lgkuwy4BoAdIFhoZ4Ief2oocXmuZSjs=
+      SEMAPHORE_ADMIN: administrator
+      SEMAPHORE_ADMIN_EMAIL: administrator@sectorq.eu
+      SEMAPHORE_ADMIN_NAME: administrator
+      SEMAPHORE_ADMIN_PASSWORD: $SEMAPHORE_ADMIN_PASSWORD
+      SEMAPHORE_DB: semaphore_db
+      SEMAPHORE_DB_HOST: db
+      SEMAPHORE_DB_PASS: StrongPassw0rd
+      SEMAPHORE_DB_PORT: 3306
+      SEMAPHORE_DB_USER: semaphore_user
+      SEMAPHORE_LDAP_ACTIVATED: 'no'
+      SEMAPHORE_LDAP_DN_BIND: cn=jaydee,ou=users,dc=sectorq,dc=eu
+      SEMAPHORE_LDAP_DN_SEARCH: dc=sectorq,dc=eu
+      SEMAPHORE_LDAP_HOST: 192.168.77.101
+      SEMAPHORE_LDAP_NEEDTLS: 'no'
+      SEMAPHORE_LDAP_PASSWORD: $LDAP_ADMIN_PASSWORD
+      SEMAPHORE_LDAP_PORT: '2389'
+      SEMAPHORE_LDAP_SEARCH_FILTER: (&(objectClass=inetOrgPerson)(uid=%s))
+      SEMAPHORE_PLAYBOOK_PATH: /tmp/semaphore/
+      TZ: Europe/Bratislava
+    image: ${DOCKER_REGISTRY:-}semaphoreui/semaphore:latest
+    labels:
+      com.centurylinklabs.watchtower.enable: true
+      wud.watch: true
+      wud.watch.digest: true
+    mem_limit: 1g
+    ports:
+    - 3002:3000
+    restart: ${RESTART:-unless-stopped}
+    volumes:
+    - /etc/localtime:/etc/localtime:ro
+    - /share/docker_data/semaphore/app/:/etc/semaphore/
+  db:
+    environment:
+      MYSQL_DATABASE: semaphore_db
+      MYSQL_PASSWORD: StrongPassw0rd
+      MYSQL_RANDOM_ROOT_PASSWORD: 'yes'
+      MYSQL_USER: semaphore_user
+    image: ${DOCKER_REGISTRY:-}mysql:8.0
+    labels:
+      wud.watch: true
+      wud.watch.digest: true
+    restart: ${RESTART:-unless-stopped}
+    volumes:
+    - /share/docker_data/semaphore/mysql/data:/var/lib/mysql