Compare commits
35 Commits
0.3.0+v6.1
...
main
Author | SHA1 | Date |
---|---|---|
Moritz | 4b71066eda | |
Moritz | f8d76d082b | |
Moritz | 41de881966 | |
Moritz | 51b24791a4 | |
iexos | aa06f74560 | |
moritz | b1609c5ef4 | |
Simon | 98d595d287 | |
Moritz | 85c09e0fab | |
3wc | 53a08095f2 | |
Philipp Rothmann | a9181c180e | |
Moritz | bc3b7a4dba | |
Philipp Rothmann | d7a3f874c9 | |
Philipp Rothmann | 9b84875ea0 | |
Philipp Rothmann | 16753c808a | |
Philipp Rothmann | 16b48136e7 | |
Philipp Rothmann | 083310a964 | |
Moritz | d3e1340e03 | |
Moritz | 28c8f7539a | |
Moritz | 97a348ce29 | |
Moritz | 3d94108785 | |
3wc | a77f2c1ed9 | |
3wc | a07ac5f0df | |
3wc | f5b210f028 | |
Philipp Rothmann | 2d361c154a | |
Philipp Rothmann | 7782fd4d56 | |
Philipp Rothmann | beac62e1c9 | |
Philipp Rothmann | 75bfa3f489 | |
Philipp Rothmann | 79a695c90a | |
Philipp Rothmann | e46525e512 | |
Philipp Rothmann | 246a9229cb | |
Philipp Rothmann | 9224bb6238 | |
Philipp Rothmann | 9f89d5d475 | |
Philipp Rothmann | d97a48af0e | |
Philipp Rothmann | 9b49dad813 | |
Philipp Rothmann | 3c88052a67 |
|
@ -0,0 +1,41 @@
|
|||
---
|
||||
kind: pipeline
|
||||
name: deploy to swarm-test.autonomic.zone
|
||||
steps:
|
||||
- name: deployment
|
||||
image: git.coopcloud.tech/coop-cloud/stack-ssh-deploy:latest
|
||||
settings:
|
||||
host: swarm-test.autonomic.zone
|
||||
stack: wekan
|
||||
generate_secrets: true
|
||||
purge: true
|
||||
deploy_key:
|
||||
from_secret: drone_ssh_swarm_test
|
||||
networks:
|
||||
- proxy
|
||||
environment:
|
||||
DOMAIN: wekan.swarm-test.autonomic.zone
|
||||
STACK_NAME: wekan
|
||||
LETS_ENCRYPT_ENV: production
|
||||
SECRET_OAUTH2_SECRET_VERSION: v1
|
||||
ENTRYPOINT_VERSION: v1
|
||||
SECRET_OAUTH2_SECRET_VERSION: v1
|
||||
trigger:
|
||||
branch:
|
||||
- main
|
||||
---
|
||||
kind: pipeline
|
||||
name: generate recipe catalogue
|
||||
steps:
|
||||
- name: release a new version
|
||||
image: plugins/downstream
|
||||
settings:
|
||||
server: https://build.coopcloud.tech
|
||||
token:
|
||||
from_secret: drone_abra-bot_token
|
||||
fork: true
|
||||
repositories:
|
||||
- coop-cloud/auto-recipes-catalogue-json
|
||||
|
||||
trigger:
|
||||
event: tag
|
15
.env.sample
15
.env.sample
|
@ -1,13 +1,16 @@
|
|||
TYPE=wekan
|
||||
TIMEOUT=300
|
||||
ENABLE_AUTO_UPDATE=true
|
||||
LETS_ENCRYPT_ENV=production
|
||||
SECRET_OAUTH2_SECRET_VERSION=v1
|
||||
|
||||
COMPOSE_FILE="compose.yml"
|
||||
|
||||
MONGO_URL=mongodb://db:27017/wekan
|
||||
# Set this to run mongodb in replicaset mode (needs initialisation!)
|
||||
# COMPOSE_FILE="${COMPOSE_FILE}:compose.rs.yml"
|
||||
|
||||
DOMAIN=board.example.com
|
||||
ROOT_URL=https://board.example.com
|
||||
DOMAIN=wekan.example.com
|
||||
ROOT_URL=https://wekan.example.com
|
||||
|
||||
DEBUG=false
|
||||
|
||||
|
@ -23,12 +26,15 @@ RICHER_CARD_COMMENT_EDITOR=false
|
|||
|
||||
# PASSWORD_LOGIN_ENABLED=false
|
||||
|
||||
# LOGO_IMG_URL=https://authentik.example.com/static/dist/assets/icons/icon_left_brand.svg
|
||||
# LOGO_LINK_URL=https://authentik.example.com
|
||||
|
||||
### OAUTH2 ###
|
||||
|
||||
OAUTH2_ENABLED=false
|
||||
# OAUTH2_LOGIN_STYLE=redirect
|
||||
# OAUTH2_CLIENT_ID=wekan
|
||||
# OAUTH2_SERVER_URL=https://sso.example.com
|
||||
# OAUTH2_SERVER_URL=https://authentik.example.com
|
||||
# OAUTH2_AUTH_ENDPOINT=/application/o/authorize/
|
||||
# OAUTH2_USERINFO_ENDPOINT=/application/o/userinfo/
|
||||
# OAUTH2_TOKEN_ENDPOINT=/application/o/token/
|
||||
|
@ -38,6 +44,7 @@ OAUTH2_ENABLED=false
|
|||
# OAUTH2_FULLNAME_MAP=given_name
|
||||
# OAUTH2_EMAIL_MAP=email
|
||||
# PROPAGATE_OIDC_DATA=true
|
||||
# OIDC_REDIRECTION_ENABLED=true
|
||||
|
||||
|
||||
### LDAP ###
|
||||
|
|
24
README.md
24
README.md
|
@ -27,3 +27,27 @@ See original [docker-compose.yml](https://github.com/wekan/wekan/blob/master/doc
|
|||
|
||||
|
||||
For more, see [`docs.coopcloud.tech`](https://docs.coopcloud.tech).
|
||||
|
||||
|
||||
## use mongodb with replicaset
|
||||
|
||||
needed to enable oplog setting in wekan, which isneeded to run bigger instances?
|
||||
|
||||
after mongo conaintainer came up the first time run:
|
||||
|
||||
```
|
||||
abra app run wekan.example.org db mongo
|
||||
> rs.initiate()
|
||||
```
|
||||
|
||||
## Promote user to admin
|
||||
|
||||
If using SSO, it might happen that there is no admin user. If so, you can fix it manually in the database:
|
||||
|
||||
```
|
||||
$ abra app run <app-name> db bash
|
||||
# mongo
|
||||
> use wekan
|
||||
> db.users.find({'username': '<your username>'})
|
||||
> db.users.updateOne({'_id': '<_id from result above>'}, {$set: {'isAdmin': true}})
|
||||
```
|
||||
|
|
17
abra.sh
17
abra.sh
|
@ -1,2 +1,17 @@
|
|||
export SECRET_OAUTH2_SECRET_VERSION=v1
|
||||
export ENTRYPOINT_VERSION=v2
|
||||
|
||||
set_settings(){
|
||||
mongo wekan --eval '
|
||||
db.settings.updateOne(
|
||||
{},
|
||||
{
|
||||
$set: {
|
||||
"disableForgotPassword": true,
|
||||
"displayAuthenticationMethod" : false,
|
||||
"disableRegistration" : true,
|
||||
"customTopLeftCornerLogoImageUrl": "'$LOGO_IMG_URL'",
|
||||
"customTopLeftCornerLogoLinkUrl": "'$LOGO_LINK_URL'",
|
||||
}
|
||||
}
|
||||
)'
|
||||
}
|
||||
|
|
|
@ -0,0 +1,20 @@
|
|||
authentik:
|
||||
env:
|
||||
OAUTH2_ENABLED: "true"
|
||||
OAUTH2_SERVER_URL: https://authentik.example.com
|
||||
# TODO: set CLIENT_ID as secret
|
||||
OAUTH2_CLIENT_ID: wekan
|
||||
uncomment:
|
||||
- OAUTH2_LOGIN_STYLE
|
||||
- OAUTH2_AUTH_ENDPOINT
|
||||
- OAUTH2_USERINFO_ENDPOINT
|
||||
- OAUTH2_TOKEN_ENDPOINT
|
||||
- OAUTH2_REQUEST_PERMISSIONS
|
||||
- OAUTH2_ID_MAP
|
||||
- OAUTH2_USERNAME_MAP
|
||||
- OAUTH2_FULLNAME_MAP
|
||||
- OAUTH2_EMAIL_MAP
|
||||
- PROPAGATE_OIDC_DATA
|
||||
- OIDC_REDIRECTION_ENABLED
|
||||
shared_secrets:
|
||||
wekan_secret: oauth2_secret
|
|
@ -0,0 +1,10 @@
|
|||
version: "3.8"
|
||||
|
||||
services:
|
||||
db:
|
||||
command: mongod --oplogSize 128 --replSet rs0
|
||||
|
||||
app:
|
||||
environment:
|
||||
- MONGO_URL=mongodb://db:27017/wekan?replicaSet=rs01
|
||||
- MONGO_OPLOG_URL=mongodb://db:27017/local?replicaSet=rsWekan=value
|
43
compose.yml
43
compose.yml
|
@ -1,8 +1,11 @@
|
|||
version: '3.8'
|
||||
services:
|
||||
db:
|
||||
image: mongo:4.4
|
||||
command: mongod --logpath /dev/null --oplogSize 128 --quiet
|
||||
image: mongo:5.0
|
||||
environment:
|
||||
- LOGO_IMG_URL
|
||||
- LOGO_LINK_URL
|
||||
command: mongod --oplogSize 128 --quiet
|
||||
volumes:
|
||||
- wekan-db:/data/db
|
||||
networks:
|
||||
|
@ -16,14 +19,14 @@ services:
|
|||
deploy:
|
||||
labels:
|
||||
backupbot.backup: "true"
|
||||
backupbot.backup.pre-hook: "mkdir /tmp/backup/ && mongodump --archive=/tmp/backup/wekan.db"
|
||||
backupbot.backup.post-hook: "rm -rf /tmp/backup"
|
||||
backupbot.backup.path: "/tmp/backup/"
|
||||
backupbot.backup.pre-hook: "mongodump --archive=/data/db/wekan.db"
|
||||
backupbot.backup.post-hook: "rm -rf /data/db/wekan.db"
|
||||
backupbot.backup.path: "/data/db/wekan.db"
|
||||
|
||||
app:
|
||||
image: quay.io/wekan/wekan:v6.11
|
||||
image: quay.io/wekan/wekan:v7.30
|
||||
environment:
|
||||
- MONGO_URL
|
||||
- MONGO_URL=mongodb://db:27017/wekan
|
||||
- DOMAIN
|
||||
- ROOT_URL
|
||||
- DEBUG
|
||||
|
@ -32,7 +35,7 @@ services:
|
|||
- WITH_API
|
||||
- RICHER_CARD_COMMENT_EDITOR
|
||||
- CORS
|
||||
- CORS_ALLOW_HEADERS
|
||||
- CORS_ALLOW_HEADERS
|
||||
- CORS_EXPOSE_HEADERS
|
||||
- PASSWORD_LOGIN_ENABLED
|
||||
- OAUTH2_ENABLED
|
||||
|
@ -50,22 +53,23 @@ services:
|
|||
- OAUTH2_EMAIL_MAP
|
||||
- DEFAULT_AUTHENTICATION_METHOD
|
||||
- PROPAGATE_OIDC_DATA
|
||||
- OIDC_REDIRECTION_ENABLED
|
||||
networks:
|
||||
- internal
|
||||
- proxy
|
||||
- internal
|
||||
- proxy
|
||||
depends_on:
|
||||
- db
|
||||
healthcheck:
|
||||
test: node /build/healthcheck.js # no curl for healthcheck in wekan container
|
||||
test: bash /build/healthcheck.sh
|
||||
interval: 30s
|
||||
timeout: 10s
|
||||
retries: 10
|
||||
start_period: 1m
|
||||
start_period: 3m
|
||||
secrets:
|
||||
- oauth2_secret
|
||||
configs:
|
||||
- source: healthcheck_js
|
||||
target: /build/healthcheck.js
|
||||
- source: healthcheck_sh
|
||||
target: /build/healthcheck.sh
|
||||
mode: 0555
|
||||
- source: entrypoint
|
||||
target: /home/wekan/app/docker-entrypoint.sh
|
||||
|
@ -82,20 +86,21 @@ services:
|
|||
- "traefik.http.routers.${STACK_NAME}.rule=Host(`${DOMAIN}`)"
|
||||
- "traefik.http.routers.${STACK_NAME}.entrypoints=web-secure"
|
||||
- "traefik.http.routers.${STACK_NAME}.tls.certresolver=${LETS_ENCRYPT_ENV}"
|
||||
- "coop-cloud.${STACK_NAME}.version=0.3.0+v6.11"
|
||||
- "coop-cloud.${STACK_NAME}.version=2.1.1+v7.30"
|
||||
- "coop-cloud.${STACK_NAME}.timeout=${TIMEOUT:-120}"
|
||||
|
||||
volumes:
|
||||
wekan-db:
|
||||
|
||||
|
||||
networks:
|
||||
proxy:
|
||||
external: true
|
||||
internal:
|
||||
|
||||
configs:
|
||||
healthcheck_js:
|
||||
name: ${STACK_NAME}_healthcheck_js
|
||||
file: healthcheck.js
|
||||
healthcheck_sh:
|
||||
name: ${STACK_NAME}_healthcheck_sh
|
||||
file: healthcheck.sh
|
||||
entrypoint:
|
||||
name: ${STACK_NAME}_entrypoint_${ENTRYPOINT_VERSION}
|
||||
file: entrypoint.sh.tmpl
|
||||
|
|
|
@ -1,23 +0,0 @@
|
|||
const http = require('http');
|
||||
const options = {
|
||||
host: '0.0.0.0',
|
||||
port: 8080,
|
||||
timeout: 2000
|
||||
};
|
||||
|
||||
const healthCheck = http.request(options, (res) => {
|
||||
console.log(`HEALTHCHECK STATUS: ${res.statusCode}`);
|
||||
if (res.statusCode == 200) {
|
||||
process.exit(0);
|
||||
}
|
||||
else {
|
||||
process.exit(1);
|
||||
}
|
||||
});
|
||||
|
||||
healthCheck.on('error', function (err) {
|
||||
console.error('ERROR');
|
||||
process.exit(1);
|
||||
});
|
||||
|
||||
healthCheck.end();
|
|
@ -0,0 +1,87 @@
|
|||
#!/bin/sh
|
||||
|
||||
printf "GET / HTTP/1.1\n\n" > /dev/tcp/127.0.0.1/8080
|
||||
if [ $? != 0 ]; then
|
||||
echo "Webservice not accessible"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
CPU_USAGE_THRESHOLD=100.0
|
||||
|
||||
PID=$(pidof node)
|
||||
if [ -z "$PID" ]; then
|
||||
echo "Node.js process not running."
|
||||
exit 1
|
||||
fi
|
||||
STATE_FILE="/tmp/cpu_usage_state_$PID"
|
||||
|
||||
# Function to get total CPU time
|
||||
get_total_cpu_time() {
|
||||
cat /proc/stat | grep '^cpu ' | awk '{sum=0; for(i=2;i<=NF;i++) sum += $i; print sum;}'
|
||||
}
|
||||
|
||||
# Function to get process CPU time
|
||||
get_process_cpu_time() {
|
||||
cat /proc/$PID/stat | awk '{print $14+$15}' # Only user and system time
|
||||
}
|
||||
|
||||
# Function to get the number of CPUs
|
||||
get_cpu_count() {
|
||||
grep -c '^processor' /proc/cpuinfo
|
||||
}
|
||||
|
||||
# Main script
|
||||
if [ -z "$PID" ]; then
|
||||
echo "Usage: $0 <pid>"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# Check if the process directory exists
|
||||
if [ ! -d "/proc/$PID" ]; then
|
||||
echo "Process with PID $PID does not exist."
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# Get current CPU times
|
||||
current_total=$(get_total_cpu_time)
|
||||
current_process=$(get_process_cpu_time $PID)
|
||||
|
||||
# Check for previous state
|
||||
if [ -f "$STATE_FILE" ]; then
|
||||
# Read previous state
|
||||
read prev_total prev_process < "$STATE_FILE"
|
||||
|
||||
# Calculate the CPU usage
|
||||
delta_total=$((current_total - prev_total))
|
||||
delta_process=$((current_process - prev_process))
|
||||
CPU_COUNT=$(get_cpu_count)
|
||||
|
||||
# Normalize CPU usage across all CPUs and calculate percentage
|
||||
if [ $delta_total -gt 0 ]; then # To avoid division by zero
|
||||
CPU_USAGE=$(awk -v delta_process="$delta_process" -v delta_total="$delta_total" -v cpu_count="$CPU_COUNT" \
|
||||
'BEGIN {printf "%.2f", (delta_process / delta_total) * 100 * cpu_count}')
|
||||
awk -v usage="$CPU_USAGE" -v threshold="$CPU_USAGE_THRESHOLD" '
|
||||
BEGIN {
|
||||
if (usage > threshold) {
|
||||
print "High CPU usage: " usage "% (Threshold: " threshold "%)";
|
||||
exit 1; # Exit with status 1 for high usage
|
||||
} else {
|
||||
print "CPU usage within limits: " usage "%";
|
||||
exit 0; # Normal exit status
|
||||
}
|
||||
}'
|
||||
EXIT_STATUS=$?
|
||||
else
|
||||
echo "No enough data to calculate CPU usage. Please try again."
|
||||
fi
|
||||
else
|
||||
echo "No previous data found. Run the script later to get CPU usage."
|
||||
fi
|
||||
|
||||
# Save current state
|
||||
echo "$current_total $current_process" > "$STATE_FILE"
|
||||
|
||||
if [ $EXIT_STATUS -ne 0 ]; then
|
||||
echo "Exiting due to high CPU usage."
|
||||
exit $EXIT_STATUS
|
||||
fi
|
Loading…
Reference in New Issue