83 lines
4.1 KiB
YAML
83 lines
4.1 KiB
YAML
# ==============================================
|
|
# AIRCARD-IOS.ORG - Automatisches Deployment aus Gitea
|
|
# URL: aircard-ios.org
|
|
# Repository: https://git.webklar.com/knso/AirCardIOS
|
|
# Einfügen unter `services:` direkt nach dem eship-Block (siehe deploy/README.md).
|
|
# Starten NUR mit: docker compose up -d aircard-build aircard
|
|
# (ein nacktes `up -d` würde andere Dienste wieder anlegen)
|
|
# Die Appwrite-Route liegt als Datei in traefik/dynamic/aircard.yml.
|
|
# AIRCARD_APPWRITE_PROJECT_ID kommt aus /home/webklar/apps/.env.
|
|
# ==============================================
|
|
aircard-build:
|
|
image: node:22-alpine
|
|
container_name: webklar-aircard-build
|
|
restart: unless-stopped
|
|
init: true
|
|
mem_limit: 768m
|
|
working_dir: /app
|
|
environment:
|
|
- GITEA_URL=https://git.webklar.com
|
|
- GITEA_USER=knso
|
|
- GITEA_REPO=AirCardIOS
|
|
- GITEA_TOKEN=${GITEA_DEPLOY_TOKEN}
|
|
- APP_SUBDIR=web
|
|
- DEPLOY_BRANCH=main
|
|
- AIRCARD_DEPLOY_BRANCH=main
|
|
- AIRCARD_WEBHOOK_TOKEN=${GITEA_DEPLOY_WEBHOOK_SECRET}
|
|
- AIRCARD_WEBHOOK_PORT=8087
|
|
- AIRCARD_DEPLOY_SCRIPT=/deploy.sh
|
|
- POLL_INTERVAL_MINUTES=15
|
|
- NODE_OPTIONS=--max-old-space-size=512
|
|
- VITE_APPWRITE_ENDPOINT=https://aircard-ios.org/v1
|
|
- VITE_APPWRITE_PROJECT_ID=${AIRCARD_APPWRITE_PROJECT_ID}
|
|
volumes:
|
|
- ./aircard-ios.org/build:/app
|
|
- ./aircard-ios.org/out:/out
|
|
- ./aircard-ios.org/deploy.sh:/deploy.sh:ro
|
|
- ./aircard-ios.org/webhook-server.js:/webhook/server.js:ro
|
|
networks:
|
|
- webklar-network
|
|
command: /bin/sh -c "apk add --no-cache git && node /webhook/server.js"
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.http.routers.aircard-webhook.rule=Host(`aircard-ios.org`) && Path(`/webhook/deploy`)"
|
|
- "traefik.http.routers.aircard-webhook.entrypoints=websecure"
|
|
- "traefik.http.routers.aircard-webhook.tls.certresolver=letsencrypt"
|
|
- "traefik.http.routers.aircard-webhook.priority=200"
|
|
- "traefik.http.services.aircard-webhook.loadbalancer.server.port=8087"
|
|
|
|
aircard:
|
|
image: nginx:alpine
|
|
container_name: webklar-aircard
|
|
restart: unless-stopped
|
|
mem_limit: 64m
|
|
volumes:
|
|
- ./aircard-ios.org/out:/usr/share/nginx/html:ro
|
|
- ./aircard-ios.org/nginx/aircard-ios.org.conf:/etc/nginx/conf.d/default.conf:ro
|
|
networks:
|
|
- webklar-network
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.http.routers.aircard.rule=Host(`aircard-ios.org`)"
|
|
- "traefik.http.routers.aircard.entrypoints=websecure"
|
|
- "traefik.http.routers.aircard.tls.certresolver=letsencrypt"
|
|
- "traefik.http.services.aircard.loadbalancer.server.port=80"
|
|
- "traefik.http.middlewares.aircard-https.redirectscheme.scheme=https"
|
|
- "traefik.http.middlewares.aircard-https.redirectscheme.permanent=true"
|
|
- "traefik.http.routers.aircard-http.rule=Host(`aircard-ios.org`)"
|
|
- "traefik.http.routers.aircard-http.entrypoints=web"
|
|
- "traefik.http.routers.aircard-http.middlewares=aircard-https"
|
|
# --- www (Step 10): erst einkommentieren, wenn www.aircard-ios.org per DNS auf 91.99.156.85 zeigt.
|
|
# Eigene Router, damit ein www-Fehler (Zertifikat) die Hauptdomain nicht blockiert.
|
|
# `$$` ist das Escape für ein einzelnes `$` in docker compose; `\\.` ergibt im YAML ein `\.`.
|
|
# - "traefik.http.routers.aircard-www.rule=Host(`www.aircard-ios.org`)"
|
|
# - "traefik.http.routers.aircard-www.entrypoints=websecure"
|
|
# - "traefik.http.routers.aircard-www.tls.certresolver=letsencrypt"
|
|
# - "traefik.http.routers.aircard-www.middlewares=aircard-www"
|
|
# - "traefik.http.routers.aircard-www-http.rule=Host(`www.aircard-ios.org`)"
|
|
# - "traefik.http.routers.aircard-www-http.entrypoints=web"
|
|
# - "traefik.http.routers.aircard-www-http.middlewares=aircard-www"
|
|
# - "traefik.http.middlewares.aircard-www.redirectregex.regex=^https?://www\\.aircard-ios\\.org(.*)"
|
|
# - "traefik.http.middlewares.aircard-www.redirectregex.replacement=https://aircard-ios.org$${1}"
|
|
# - "traefik.http.middlewares.aircard-www.redirectregex.permanent=true"
|