Compare commits
12 Commits
1.2.0+2.12
...
master
Author | SHA1 | Date |
---|---|---|
3wc | fe53a73a78 | |
trav | 5bbf1e37b4 | |
trav | 63d7346dc5 | |
trav | 4c0647677c | |
3wc | a41129c1e9 | |
3wc | 5cb5d6706d | |
3wc | f472e38aae | |
3wc | a646327283 | |
3wc | 1283e01b52 | |
3wc | fadf67f847 | |
3wc | 0357b469f6 | |
3wc | 057ab4df40 |
20
.drone.yml
20
.drone.yml
|
@ -3,10 +3,12 @@ kind: pipeline
|
|||
name: deploy to swarm-test.autonomic.zone
|
||||
steps:
|
||||
- name: deployment
|
||||
image: decentral1se/stack-ssh-deploy:latest
|
||||
image: git.coopcloud.tech/coop-cloud/stack-ssh-deploy:latest
|
||||
settings:
|
||||
host: swarm-test.autonomic.zone
|
||||
stack: drone
|
||||
networks:
|
||||
- proxy
|
||||
deploy_key:
|
||||
from_secret: drone_ssh_swarm_test
|
||||
generate_secrets: true
|
||||
|
@ -24,11 +26,17 @@ trigger:
|
|||
- master
|
||||
---
|
||||
kind: pipeline
|
||||
name: recipe release
|
||||
name: generate recipe catalogue
|
||||
steps:
|
||||
- name: release a new version
|
||||
image: thecoopcloud/drone-abra:latest
|
||||
image: plugins/downstream
|
||||
settings:
|
||||
command: recipe drone release
|
||||
deploy_key:
|
||||
from_secret: abra_bot_deploy_key
|
||||
server: https://build.coopcloud.tech
|
||||
token:
|
||||
from_secret: drone_abra-bot_token
|
||||
fork: true
|
||||
repositories:
|
||||
- coop-cloud/auto-recipes-catalogue-json
|
||||
|
||||
trigger:
|
||||
event: tag
|
||||
|
|
67
README.md
67
README.md
|
@ -19,10 +19,73 @@
|
|||
2. Deploy [`coop-cloud/traefik`]
|
||||
3. `abra app new drone --secrets` (optionally with `--pass` if you'd like
|
||||
to save secrets in `pass`)
|
||||
4. `abra app YOURAPPDOMAIN config` - be sure to change `DOMAIN` to something that resolves to
|
||||
4. `abra app config YOURAPPDOMAIN` - be sure to change `DOMAIN` to something that resolves to
|
||||
your Docker swarm box
|
||||
5. `abra app YOURAPPDOMAIN deploy`
|
||||
5. `abra app deploy YOURAPPDOMAIN`
|
||||
6. Open the configured domain in your browser to finish set-up
|
||||
|
||||
## Setup with Gitea
|
||||
|
||||
follow this guide: https://docs.drone.io/server/provider/gitea/
|
||||
|
||||
then you'll also need to setup drone-docker-runner (`abra app new drone-docker-runner`). More info at https://docs.drone.io/runner/docker/installation/linux/.
|
||||
|
||||
|
||||
## Setting up a server for auto-deployment
|
||||
|
||||
For Drone to be able to deploy to a server, you need:
|
||||
|
||||
- A drone user on the server, added to the `docker` group
|
||||
- An SSH key, added as a secret in Drone, and added to `/home/drone/.ssh/authorized_keys on the server`
|
||||
|
||||
1. Add a `drone` user on `example.zone`, the server which you’re hosting the site on.
|
||||
|
||||
a. `sudo adduser drone`
|
||||
|
||||
b. create an SSH key for the user using `ssh-keygen` , e.g. `sudo -u drone ssh-keygen`
|
||||
|
||||
c. copy the contents of the public side of the new key to `/home/drone/.ssh/authorized_keys`
|
||||
|
||||
d. run `chmod go-rwx /home/drone/.ssh`
|
||||
|
||||
e. add `drone` to `AllowUsers` in `/etc/ssh/sshd_confand` restart SSH, `sudo service sshd restart`
|
||||
|
||||
2. Give the drone user access to the `docker` group; `sudo usermod -aG docker drone`
|
||||
|
||||
3. Generate a new SSH key and insert it as a Drone “orgsecret”
|
||||
|
||||
a. Log into Drone as `admin`, then either:
|
||||
|
||||
b. Add the “orgsecret” using the [Drone CLI](https://docs.drone.io/cli/install/):
|
||||
|
||||
i. Go to the “account” page https://drone.autonomic.zone/account
|
||||
|
||||
ii. Copy/paste the “Example CLI usage” into a terminal (you might want to add to `~/.bashrc` to make this easier next time)
|
||||
|
||||
iii. Run `drone orgsecret add [org you're adding the org secret to] [domain name] @drone_ssh_[example.zone]`
|
||||
|
||||
c. Add the “orgsecret” using the Drone web interface:
|
||||
|
||||
i. Find the repository page, or the page for another repository in the same organisation, in Drone
|
||||
|
||||
ii. On the “Settings” tab, under “Organization” on the left, click “Secrets”, then create a new secret and paste in the private key value
|
||||
|
||||
|
||||
[`abra`]: https://git.autonomic.zone/autonomic-cooperative/abra
|
||||
[`coop-cloud/traefik`]: https://git.autonomic.zone/coop-cloud/traefik
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
|
|
@ -3,7 +3,7 @@ version: "3.8"
|
|||
|
||||
services:
|
||||
app:
|
||||
image: "drone/drone:2.12.0"
|
||||
image: "drone/drone:2.22.0"
|
||||
volumes:
|
||||
- "data:/data"
|
||||
configs:
|
||||
|
@ -39,7 +39,7 @@ services:
|
|||
- "traefik.http.routers.${STACK_NAME}.middlewares=${STACK_NAME}-redirect"
|
||||
- "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLForceHost=true"
|
||||
- "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLHost=${DOMAIN}"
|
||||
- "coop-cloud.${STACK_NAME}.version=1.2.0+2.12.0"
|
||||
- "coop-cloud.${STACK_NAME}.version=1.6.0+2.22.0"
|
||||
|
||||
volumes:
|
||||
data:
|
||||
|
|
Loading…
Reference in New Issue