Murat ÖZDEMİR
2198f932cd
* Introduces an Ansible role for installing and registering `act_runner` for Gitea Actions. * Automates PostgreSQL and MongoDB deployment on Docker Swarm in the test environment, leveraging Docker named volumes for data persistence. * Translates core documentation, including `README.md` and `setup/04-test-db-docker-kurulum.md`, to Turkish. * Adds comprehensive documentation for firewall architecture (`facts/firewall.md`) and Docker Swarm node recovery (`facts/swarm-node-recovery.md`). * Enhances security hardening by ensuring `fail2ban` is enabled and streamlining admin SSH key management via Ansible. * Updates Ansible vault structure to support new secret variables and adds `.vault_pass` to `.gitignore`.
43 lines
1005 B
Django/Jinja
43 lines
1005 B
Django/Jinja
version: "3.8"
|
|
|
|
networks:
|
|
iklimco-net:
|
|
external: true
|
|
|
|
volumes:
|
|
postgresql_data:
|
|
mongodb_data:
|
|
|
|
services:
|
|
postgresql:
|
|
image: {{ db_postgres_image }}
|
|
environment:
|
|
POSTGRES_USER: "{{ db_postgres_root_user }}"
|
|
POSTGRES_PASSWORD: "{{ db_postgres_password }}"
|
|
POSTGRES_DB: postgres
|
|
PGDATA: /var/lib/postgresql/data/pgdata
|
|
volumes:
|
|
- postgresql_data:/var/lib/postgresql/data
|
|
networks:
|
|
- iklimco-net
|
|
deploy:
|
|
placement:
|
|
constraints:
|
|
- node.labels.role == db
|
|
|
|
mongodb:
|
|
image: {{ db_mongo_image }}
|
|
environment:
|
|
MONGO_INITDB_ROOT_USERNAME: "{{ db_mongo_root_user }}"
|
|
MONGO_INITDB_ROOT_PASSWORD: "{{ db_mongo_root_password }}"
|
|
volumes:
|
|
- mongodb_data:/data/db
|
|
- /opt/iklimco/db/mongodb/config/mongod.conf:/etc/mongod.conf
|
|
command: ["--config", "/etc/mongod.conf"]
|
|
networks:
|
|
- iklimco-net
|
|
deploy:
|
|
placement:
|
|
constraints:
|
|
- node.labels.role == db
|