Compare commits
51 Commits
0.1.0+1.0.
...
2.2.1+1.0.
Author | SHA1 | Date | |
---|---|---|---|
58c8bba02e | |||
a304f89042 | |||
27f81a3e81 | |||
b849a3b536 | |||
2ac052366a | |||
61e96089f1 | |||
6790fa45af | |||
1a1384177a | |||
bec1a54581 | |||
c3e117bcdf | |||
866c46f20d | |||
caa49701a9 | |||
a8fe024635 | |||
ce991f453e | |||
b302384ad0 | |||
5d55c3e70d | |||
53ab8dbf39 | |||
a7bda15182 | |||
d080b8c09b | |||
a93358bd68 | |||
3a0d30da6a | |||
2da198b21b | |||
e90183f153 | |||
03cdb435dd | |||
33a740929d | |||
98ef8f18d3 | |||
b28d08551e | |||
7e15af4875 | |||
b0a737d69e | |||
45d76b05f6 | |||
6804752d3b | |||
fc95658dba | |||
a1cdd385b4 | |||
5ecc26589b | |||
c58712f63f | |||
9ba3d0bc3f | |||
6e8c37c2a6 | |||
c60645a61d | |||
cfee2399cf | |||
f19a20f880 | |||
0633d72d7d | |||
0e24c78541 | |||
32559a5aea | |||
efebc41519 | |||
0a21e11116 | |||
8454597fca | |||
caa7b8a02e | |||
3b6879415f | |||
777cb6263e | |||
23c2238460 | |||
07e57c5022 |
41
.drone.yml
Normal file
41
.drone.yml
Normal file
@ -0,0 +1,41 @@
|
|||||||
|
---
|
||||||
|
kind: pipeline
|
||||||
|
name: deploy to swarm-test.autonomic.zone
|
||||||
|
steps:
|
||||||
|
- name: deployment
|
||||||
|
image: git.coopcloud.tech/coop-cloud/stack-ssh-deploy:latest
|
||||||
|
settings:
|
||||||
|
host: swarm-test.autonomic.zone
|
||||||
|
stack: federatedwiki
|
||||||
|
generate_secrets: true
|
||||||
|
purge: true
|
||||||
|
deploy_key:
|
||||||
|
from_secret: drone_ssh_swarm_test
|
||||||
|
networks:
|
||||||
|
- proxy
|
||||||
|
environment:
|
||||||
|
DOMAIN: federatedwiki.swarm-test.autonomic.zone
|
||||||
|
STACK_NAME: federatedwiki
|
||||||
|
LETS_ENCRYPT_ENV: production
|
||||||
|
INSTALL_SH_VERSION: v1
|
||||||
|
CONFIG_JSON_VERSION: v1
|
||||||
|
CONFIG_OWNER_JSON_VERSION: v1
|
||||||
|
trigger:
|
||||||
|
branch:
|
||||||
|
- main
|
||||||
|
---
|
||||||
|
kind: pipeline
|
||||||
|
name: generate recipe catalogue
|
||||||
|
steps:
|
||||||
|
- name: release a new version
|
||||||
|
image: plugins/downstream
|
||||||
|
settings:
|
||||||
|
server: https://build.coopcloud.tech
|
||||||
|
token:
|
||||||
|
from_secret: drone_abra-bot_token
|
||||||
|
fork: true
|
||||||
|
repositories:
|
||||||
|
- toolshed/auto-recipes-catalogue-json
|
||||||
|
|
||||||
|
trigger:
|
||||||
|
event: tag
|
23
.env.sample
23
.env.sample
@ -5,11 +5,22 @@ DOMAIN=federatedwiki.example.com
|
|||||||
#EXTRA_DOMAINS=', `www.federatedwiki.example.com`'
|
#EXTRA_DOMAINS=', `www.federatedwiki.example.com`'
|
||||||
LETS_ENCRYPT_ENV=production
|
LETS_ENCRYPT_ENV=production
|
||||||
|
|
||||||
# Predefined "owner" security
|
COMPOSE_FILE="compose.yml"
|
||||||
#COMPOSE_FILE="compose.yml:compose.owner.yml"
|
|
||||||
|
|
||||||
COOKIE_SECRET="asflkjqpweoriuwpeogdjgbpdofigh"
|
# Change to an absolute path to use a bind-mount, e.g. /opt/fedwiki
|
||||||
AUTHOR="Baja Colorado"
|
FEDWIKI_VOLUME="fedwiki"
|
||||||
ADMIN_KEY="<paste from a .wiki/DOMAIN/status/owner.json file>"
|
|
||||||
|
|
||||||
FEDWIKI_IS_PRIVATE=0
|
# custom wiki.cafe image, for working oauth2 support
|
||||||
|
#COMPOSE_FILE="$COMPOSE_FILE:compose.wikicafe.yml"
|
||||||
|
|
||||||
|
# persistent lib volume / node_modules directory, e.g. for plugmatic
|
||||||
|
#COMPOSE_FILE="$COMPOSE_FILE:compose.lib.yml"
|
||||||
|
|
||||||
|
# Note(3wc): If you change this after initial deployment, you will need to
|
||||||
|
# manually copy the new value from `conf/config.initial.json`
|
||||||
|
SECRET_COOKIE_SECRET_VERSION=v1 # length=30
|
||||||
|
|
||||||
|
# Disable SSL encryption (not recommended)
|
||||||
|
#COMPOSE_FILE="$COMPOSE_FILE:compose.insecure.yml"
|
||||||
|
|
||||||
|
CONFIG_FILE="config.json"
|
||||||
|
@ -18,9 +18,9 @@ Share pages circulating within a creative commons
|
|||||||
1. Set up Docker Swarm and [`abra`]
|
1. Set up Docker Swarm and [`abra`]
|
||||||
2. Deploy [`coop-cloud/traefik`]
|
2. Deploy [`coop-cloud/traefik`]
|
||||||
3. `abra app new federatedwiki`
|
3. `abra app new federatedwiki`
|
||||||
4. `abra app YOURAPPDOMAIN config` - be sure to change `DOMAIN` to something that resolves to
|
4. `abra app config YOURAPPDOMAIN` - be sure to change `DOMAIN` to something that resolves to
|
||||||
your Docker swarm box
|
your Docker swarm box
|
||||||
5. `abra app YOURAPPDOMAIN deploy`
|
5. `abra app deploy YOURAPPDOMAIN`
|
||||||
|
|
||||||
[`abra`]: https://git.autonomic.zone/autonomic-cooperative/abra
|
[`abra`]: https://git.autonomic.zone/autonomic-cooperative/abra
|
||||||
[`coop-cloud/traefik`]: https://git.autonomic.zone/coop-cloud/traefik
|
[`coop-cloud/traefik`]: https://git.autonomic.zone/coop-cloud/traefik
|
||||||
|
25
abra.sh
25
abra.sh
@ -1,23 +1,2 @@
|
|||||||
export INSTALL_SH_VERSION=v9
|
export ENTRYPOINT_SH_VERSION=v2
|
||||||
export CONFIG_JSON_VERSION=v7
|
export CONFIG_INITIAL_JSON_VERSION=v1
|
||||||
export CONFIG_OWNER_JSON_VERSION=v4
|
|
||||||
|
|
||||||
abra_backup_app() {
|
|
||||||
_abra_backup_dir "app:/home/node/.wiki"
|
|
||||||
}
|
|
||||||
|
|
||||||
abra_restore_app() {
|
|
||||||
# shellcheck disable=SC2034
|
|
||||||
{
|
|
||||||
abra__src_="-"
|
|
||||||
abra__dst_="app:/home/node/.wiki"
|
|
||||||
}
|
|
||||||
|
|
||||||
zcat "$@" | sub_app_cp
|
|
||||||
|
|
||||||
success "Restored 'app'"
|
|
||||||
}
|
|
||||||
|
|
||||||
abra_backup() {
|
|
||||||
abra_backup_app
|
|
||||||
}
|
|
||||||
|
11
compose.insecure.yml
Normal file
11
compose.insecure.yml
Normal file
@ -0,0 +1,11 @@
|
|||||||
|
---
|
||||||
|
version: "3.8"
|
||||||
|
|
||||||
|
services:
|
||||||
|
app:
|
||||||
|
deploy:
|
||||||
|
labels:
|
||||||
|
- "traefik.http.services.${STACK_NAME}-non-tls.loadbalancer.server.port=3000"
|
||||||
|
- "traefik.http.routers.${STACK_NAME}-non-tls.rule=Host(`${DOMAIN}`) || HostRegexp(`{subdomain:\\w+}.${DOMAIN}`) || HostRegexp(`{subsubdomain:\\w+}.{subdomain:\\w+}.${DOMAIN}`)"
|
||||||
|
- "traefik.http.routers.${STACK_NAME}-non-tls.entrypoints=web"
|
||||||
|
- "caddy=https://${DOMAIN}, https://*.${DOMAIN}, https://*.*.${DOMAIN}, https://*.*.*.${DOMAIN}, http://${DOMAIN}, http://*.${DOMAIN}, http://*.*.${DOMAIN}, http://*.*.*.${DOMAIN}"
|
10
compose.lib.yml
Normal file
10
compose.lib.yml
Normal file
@ -0,0 +1,10 @@
|
|||||||
|
---
|
||||||
|
version: "3.8"
|
||||||
|
|
||||||
|
services:
|
||||||
|
app:
|
||||||
|
volumes:
|
||||||
|
- "fedwiki_lib:/home/node/lib"
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
fedwiki_lib:
|
@ -1,15 +0,0 @@
|
|||||||
|
|
||||||
---
|
|
||||||
version: "3.8"
|
|
||||||
|
|
||||||
services:
|
|
||||||
app:
|
|
||||||
configs:
|
|
||||||
- source: config_owner_json_conf
|
|
||||||
target: /home/node/config/config.owner.json
|
|
||||||
|
|
||||||
configs:
|
|
||||||
config_owner_json_conf:
|
|
||||||
name: ${STACK_NAME}_config_owner_json_${CONFIG_OWNER_JSON_VERSION}
|
|
||||||
file: config.owner.json.tmpl
|
|
||||||
template_driver: golang
|
|
6
compose.wikicafe.yml
Normal file
6
compose.wikicafe.yml
Normal file
@ -0,0 +1,6 @@
|
|||||||
|
---
|
||||||
|
version: "3.8"
|
||||||
|
|
||||||
|
services:
|
||||||
|
app:
|
||||||
|
image: git.coopcloud.tech/wiki-cafe/wiki-farm:latest
|
58
compose.yml
58
compose.yml
@ -3,24 +3,27 @@ version: "3.8"
|
|||||||
|
|
||||||
services:
|
services:
|
||||||
app:
|
app:
|
||||||
image: dobbs/farm:1.0.13
|
image: dobbs/farm:1.0.29
|
||||||
command: /bin/sh config/install.sh
|
command: /bin/sh entrypoint.sh
|
||||||
volumes:
|
volumes:
|
||||||
- "fedwiki_friends:/home/node/config"
|
- "${FEDWIKI_VOLUME}:/home/node/.wiki"
|
||||||
- "fedwiki:/home/node/.wiki"
|
|
||||||
networks:
|
networks:
|
||||||
- proxy
|
- proxy
|
||||||
configs:
|
configs:
|
||||||
- source: install_sh_conf
|
- source: entrypoint_sh_conf
|
||||||
target: /home/node/config/install.sh
|
target: /home/node/entrypoint.sh
|
||||||
- source: config_json_conf
|
- source: config_json_initial_conf
|
||||||
target: /home/node/config/config.json
|
target: /home/node/initial-config/config.json
|
||||||
|
secrets:
|
||||||
|
- cookie_secret
|
||||||
environment:
|
environment:
|
||||||
- DOMAIN
|
- DOMAIN
|
||||||
- COOKIE_SECRET
|
- COOKIE_SECRET
|
||||||
- AUTHOR
|
- AUTHOR
|
||||||
- ADMIN_KEY
|
- ADMIN_KEY
|
||||||
deploy:
|
deploy:
|
||||||
|
update_config:
|
||||||
|
order: start-first
|
||||||
restart_policy:
|
restart_policy:
|
||||||
condition: on-failure
|
condition: on-failure
|
||||||
labels:
|
labels:
|
||||||
@ -32,27 +35,38 @@ services:
|
|||||||
- "traefik.http.routers.${STACK_NAME}.tls.domains[0].main=${DOMAIN}"
|
- "traefik.http.routers.${STACK_NAME}.tls.domains[0].main=${DOMAIN}"
|
||||||
- "traefik.http.routers.${STACK_NAME}.tls.domains[0].sans=*.${DOMAIN}"
|
- "traefik.http.routers.${STACK_NAME}.tls.domains[0].sans=*.${DOMAIN}"
|
||||||
- "traefik.http.routers.${STACK_NAME}.priority=1"
|
- "traefik.http.routers.${STACK_NAME}.priority=1"
|
||||||
- "coop-cloud.${STACK_NAME}.version=0.1.0+1.0.13"
|
- "caddy=https://${DOMAIN}, https://*.${DOMAIN}, https://*.*.${DOMAIN}, https://*.*.*.${DOMAIN}"
|
||||||
# healthcheck:
|
- "caddy.reverse_proxy={{upstreams 3000}}"
|
||||||
# test: ["CMD", "curl", "-f", "http://localhost"]
|
- "caddy.tls.on_demand="
|
||||||
# interval: 30s
|
- "backupbot.backup=true"
|
||||||
# timeout: 10s
|
- "backupbot.backup.path=/home/node/.wiki"
|
||||||
# retries: 10
|
- "coop-cloud.${STACK_NAME}.version=2.2.1+1.0.29"
|
||||||
# start_period: 1m
|
healthcheck:
|
||||||
|
test: "node -e 'var http = require(\"http\"); var options = { host : \"localhost\", port : \"3000\", timeout : 2000, path : \"/view/welcome-visitors\", headers: { \"Host\": \"${DOMAIN}\" } }; var request = http.request(options, (res)
|
||||||
|
=> { console.log(`STATUS: $${res.statusCode}`); if (res.statusCode == 200) { process.exit(0); } else { process.exit(1); } }); request.on(\"error\", function(err) { console.log('ERROR');
|
||||||
|
process.exit(1); }); request.end();'"
|
||||||
|
interval: 10s
|
||||||
|
timeout: 2s
|
||||||
|
retries: 2
|
||||||
|
start_period: 30s
|
||||||
|
|
||||||
volumes:
|
volumes:
|
||||||
fedwiki:
|
fedwiki:
|
||||||
fedwiki_friends:
|
|
||||||
|
|
||||||
networks:
|
networks:
|
||||||
proxy:
|
proxy:
|
||||||
external: true
|
external: true
|
||||||
|
|
||||||
|
secrets:
|
||||||
|
cookie_secret:
|
||||||
|
external: true
|
||||||
|
name: ${STACK_NAME}_cookie_secret_${SECRET_COOKIE_SECRET_VERSION}
|
||||||
|
|
||||||
configs:
|
configs:
|
||||||
install_sh_conf:
|
entrypoint_sh_conf:
|
||||||
name: ${STACK_NAME}_install_sh_${INSTALL_SH_VERSION}
|
name: ${STACK_NAME}_entrypoint_sh_${ENTRYPOINT_SH_VERSION}
|
||||||
file: install.sh
|
file: entrypoint.sh
|
||||||
config_json_conf:
|
config_json_initial_conf:
|
||||||
name: ${STACK_NAME}_config_json_${CONFIG_JSON_VERSION}
|
name: ${STACK_NAME}_config_initial_json_${CONFIG_INITIAL_JSON_VERSION}
|
||||||
file: config.json.tmpl
|
file: config.initial.json.tmpl
|
||||||
template_driver: golang
|
template_driver: golang
|
||||||
|
6
config.initial.json.tmpl
Normal file
6
config.initial.json.tmpl
Normal file
@ -0,0 +1,6 @@
|
|||||||
|
{
|
||||||
|
"farm": true,
|
||||||
|
"cookieSecret": "{{ secret "cookie_secret" }}",
|
||||||
|
"secure_cookie": true,
|
||||||
|
"security_type": "friends"
|
||||||
|
}
|
@ -1,14 +0,0 @@
|
|||||||
{
|
|
||||||
"admin": "{{ env "ADMIN_KEY" }}",
|
|
||||||
"farm": true,
|
|
||||||
"cookieSecret": "{{ env "COOKIE_SECRET" }}",
|
|
||||||
"secure_cookie": true,
|
|
||||||
"security_type": "friends"
|
|
||||||
{{ if eq (env "FEDWIKI_IS_PRIVATE") "1" }},
|
|
||||||
"wikiDomains": {
|
|
||||||
"$DOMAIN": {
|
|
||||||
"id": "/home/node/.wiki/config.owner.json"
|
|
||||||
}
|
|
||||||
}
|
|
||||||
{{ end }}
|
|
||||||
}
|
|
@ -1,6 +0,0 @@
|
|||||||
{
|
|
||||||
"name": "{{ env "AUTHOR" }}",
|
|
||||||
"friend": {
|
|
||||||
"secret": "{{ env "PASSWORD" }}"
|
|
||||||
}
|
|
||||||
}
|
|
9
entrypoint.sh
Normal file
9
entrypoint.sh
Normal file
@ -0,0 +1,9 @@
|
|||||||
|
#!/bin/sh
|
||||||
|
|
||||||
|
config_file="$HOME/.wiki/${CONFIG_FILE:-config.json}"
|
||||||
|
|
||||||
|
if [ ! -f "$config_file" ]; then
|
||||||
|
cp initial-config/config.json "$config_file"
|
||||||
|
fi
|
||||||
|
|
||||||
|
wiki --farm --config "$config_file"
|
11
install.sh
11
install.sh
@ -1,11 +0,0 @@
|
|||||||
#!/bin/sh
|
|
||||||
|
|
||||||
if [ ! -f .wiki/config.json ]; then
|
|
||||||
cp config/config.json .wiki/config.json
|
|
||||||
fi
|
|
||||||
|
|
||||||
if [ ! -f .wiki/config.owner.json ]; then
|
|
||||||
cp config/config.owner.json .wiki/config.owner.json
|
|
||||||
fi
|
|
||||||
|
|
||||||
wiki --farm
|
|
7
release/1.0.0+1.0.18
Normal file
7
release/1.0.0+1.0.18
Normal file
@ -0,0 +1,7 @@
|
|||||||
|
WARNING! 🚨
|
||||||
|
|
||||||
|
There is a new mandatory config option, FEDWIKI_VOLUME -- please copy the
|
||||||
|
default value from the recipe .env.sample to your .env file on upgrade.
|
||||||
|
|
||||||
|
If you haven't done that yet, best to bail with Ctrl+C, then add the option,
|
||||||
|
then re-run this `abra app upgrade ...` command
|
11
release/2.0.0+1.0.20
Normal file
11
release/2.0.0+1.0.20
Normal file
@ -0,0 +1,11 @@
|
|||||||
|
COOKIE_SECRET is now a Docker secret, and several config options have been
|
||||||
|
dropped from the recipe -- this shouldn't affect running deplyoments, as
|
||||||
|
the recipe currently just installs the generated `config.json` if there isn't
|
||||||
|
one already -- but you will likely still need to run
|
||||||
|
`abra app secret generate ...` before deploying, in preparation for moving to
|
||||||
|
ennvironment variables for config in a future release.
|
||||||
|
|
||||||
|
Additionally, there is now a healthcheck, which may require tuning, especially
|
||||||
|
on slower systems; please open a ticket on [the issue
|
||||||
|
tracker](https://git.coopcloud.tech/coop-cloud/federatedwiki/issues) if you
|
||||||
|
notice problems with the containers starting up.
|
1
release/2.1.5+1.0.27
Normal file
1
release/2.1.5+1.0.27
Normal file
@ -0,0 +1 @@
|
|||||||
|
y
|
Reference in New Issue
Block a user