diff --git a/__swarm/gitlab/gitlab-swarm.yml b/__swarm/gitlab/gitlab-swarm.yml new file mode 100644 index 0000000..599355f --- /dev/null +++ b/__swarm/gitlab/gitlab-swarm.yml @@ -0,0 +1,73 @@ +services: + web: + environment: + GITLAB_OMNIBUS_CONFIG: "external_url 'https://gitlab.sectorq.eu'\nnginx['listen_port']\ + \ = 80\nnginx['listen_https'] = false\nweb_server['username'] = 'git'\ngitlab_rails['time_zone']\ + \ = 'Europe/Bratislava'\ngitlab_rails['omniauth_enabled'] = true\ngitlab_rails['omniauth_allow_single_sign_on']\ + \ = ['saml']\ngitlab_rails['omniauth_sync_email_from_provider'] = 'saml'\n\ + gitlab_rails['omniauth_sync_profile_from_provider'] = ['saml']\ngitlab_rails['omniauth_sync_profile_attributes']\ + \ = ['email']\ngitlab_rails['omniauth_auto_sign_in_with_provider'] = 'saml'\n\ + gitlab_rails['omniauth_block_auto_created_users'] = false\ngitlab_rails['omniauth_auto_link_saml_user']\ + \ = true\ngitlab_rails['omniauth_providers'] = [\n {\n name: 'saml',\n\ + \ args: {\n assertion_consumer_service_url: 'https://gitlab.sectorq.eu/users/auth/saml/callback',\n\ + \ # Shown when navigating to certificates in authentik1\n idp_cert_fingerprint:\ + \ 'f7:fd:49:03:b3:38:52:b3:23:f5:43:c4:8d:08:65:32:e0:5a:7b:0e',\n idp_sso_target_url:\ + \ 'https://auth.sectorq.eu/application/saml/gitlab/sso/binding/redirect/',\n\ + \ issuer: 'https://gitlab.sectorq.eu',\n name_identifier_format:\ + \ 'urn:oasis:names:tc:SAML:2.0:nameid-format:persistent',\n attribute_statements:\ + \ {\n email: ['http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress'],\n\ + \ first_name: ['http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name'],\n\ + \ nickname: ['http://schemas.goauthentik.io/2021/02/saml/username']\n\ + \ }\n },\n label: 'authentik'\n }\n]\n" + TZ: Europe/Bratislava + hostname: gitlab.sectorq.eu + image: ${DOCKER_REGISTRY:-}gitlab/gitlab-ce:latest + network_mode: bridge + ports: + - target: 80 + published: 8785 + protocol: tcp + mode: ingress + - target: 443 + published: 8743 + protocol: tcp + mode: ingress + - target: 22 + published: 8722 + protocol: tcp + mode: ingress + shm_size: 4gb + volumes: + - config:/etc/gitlab + - logs:/var/log/gitlab + - data:/var/opt/gitlab + - /etc/localtime:/etc/localtime:ro + deploy: + labels: + com.centurylinklabs.watchtower.enable: 'true' + homepage.container: gitlab + homepage.description: Version control + homepage.group: Infrastructure + homepage.href: https://gitlab.sectorq.eu + homepage.icon: gitlab.png + homepage.name: Gitlab + homepage.server: my-docker-swarm + homepage.weight: '1' + homepage.widget.key: glpat-BuMKcaDqeD-Wx3dW4TM9 + homepage.widget.type: gitlab + homepage.widget.url: https://gitlab.sectorq.eu + homepage.widget.user_id: '2' + wud.watch: 'true' + wud.watch.digest: 'true' + replicas: 1 + placement: + constraints: + - node.role == manager + +volumes: + config: + driver: local + logs: + driver: local + data: + driver: local \ No newline at end of file