commit b051e39c4c63c42dd9b762cc5d4d78066429097d Author: Co-op Cloud <> Date: Fri May 7 13:34:21 2021 +0200 Initial commit diff --git a/.drone.yml b/.drone.yml new file mode 100644 index 0000000..3ea9cd3 --- /dev/null +++ b/.drone.yml @@ -0,0 +1,19 @@ +--- +kind: pipeline +name: deploy to swarm-test.autonomic.zone +steps: + - name: deployment + image: decentral1se/stack-ssh-deploy:latest + settings: + host: swarm-test.autonomic.zone + stack: mastodon + purge: true + deploy_key: + from_secret: drone_ssh_swarm_test + environment: + DOMAIN: mastodon.swarm-test.autonomic.zone + STACK_NAME: mastodon + LETS_ENCRYPT_ENV: production +trigger: + branch: + - main diff --git a/.env.sample b/.env.sample new file mode 100644 index 0000000..e89ff96 --- /dev/null +++ b/.env.sample @@ -0,0 +1,6 @@ +TYPE=mastodon + +DOMAIN=mastodon.example.com +## Domain aliases +#EXTRA_DOMAINS=', `www.mastodon.example.com`' +LETS_ENCRYPT_ENV=production diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..37b52cc --- /dev/null +++ b/.gitignore @@ -0,0 +1 @@ +/.envrc diff --git a/README.md b/README.md new file mode 100644 index 0000000..48f159e --- /dev/null +++ b/README.md @@ -0,0 +1,28 @@ +# Mastodon + +Your self-hosted, globally interconnected microblogging community + + +* **Category**: +* **Status**: +* **Image**: [`mastodon`](https://hub.docker.com/r/mastodon/mastodon) +* **Healthcheck**: +* **Backups**: +* **Email**: +* **Tests**: +* **SSO**: + + +## Basic usage + +1. Set up Docker Swarm and [`abra`] +2. Deploy [`coop-cloud/traefik`] +3. `abra app new mastodon --secrets` (optionally with `--pass` if you'd like + to save secrets in `pass`) +4. `abra app YOURAPPDOMAIN config` - be sure to change `DOMAIN` to something that resolves to + your Docker swarm box +5. `abra app YOURAPPDOMAIN deploy` +6. Open the configured domain in your browser to finish set-up + +[`abra`]: https://git.autonomic.zone/autonomic-cooperative/abra +[`coop-cloud/traefik`]: https://git.autonomic.zone/coop-cloud/traefik diff --git a/compose.yml b/compose.yml new file mode 100644 index 0000000..662a96c --- /dev/null +++ b/compose.yml @@ -0,0 +1,31 @@ +--- +version: "3.8" + +services: + app: + image: nginx:1.19.2 + networks: + - proxy + deploy: + restart_policy: + condition: on-failure + labels: + - "traefik.enable=true" + - "traefik.http.services.${STACK_NAME}.loadbalancer.server.port=80" + - "traefik.http.routers.${STACK_NAME}.rule=Host(`${DOMAIN}`${EXTRA_DOMAINS})" + - "traefik.http.routers.${STACK_NAME}.entrypoints=web-secure" + - "traefik.http.routers.${STACK_NAME}.tls.certresolver=${LETS_ENCRYPT_ENV}" + ## Redirect from EXTRA_DOMAINS to DOMAIN + #- "traefik.http.routers.${STACK_NAME}.middlewares=${STACK_NAME}-redirect" + #- "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLForceHost=true" + #- "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLHost=${DOMAIN}" + healthcheck: + test: ["CMD", "curl", "-f", "http://localhost"] + interval: 30s + timeout: 10s + retries: 10 + start_period: 1m + +networks: + proxy: + external: true