Moves `iklimco-net` overlay network creation to be managed by the Docker Swarm stack, ensuring reliable embedded DNS resolution for inter-service communication. This resolves issues where services on external overlay networks failed to discover each other via Docker DNS. This refactoring includes: * Removing the manual `iklimco-net` creation from the Ansible `swarm` role. * Adjusting `act_runner` configuration to connect job containers to `iklimco-net` only after the stack has deployed and created the network. * Setting `storagebox_file_mode` to `0600` for DB nodes to prevent "too open" errors with MongoDB keyfiles. * Provisioning dedicated bind mount directories for MongoDB and PostgreSQL on DB nodes with correct ownership and permissions. * Updating documentation to reflect the consolidated stack and network changes.
8 lines
344 B
YAML
8 lines
344 B
YAML
# DB node'larında StorageBox uid/gid=999 (mongodb ve postgres container user)
|
||
# davfs2 dosyaları uid 999 sahibi gösterir; container içi erişim açılır.
|
||
# file_mode=0600: MongoDB keyfile "too open" hatasını engeller (0666 reddedilir).
|
||
storagebox_dir_mode: "0777"
|
||
storagebox_file_mode: "0600"
|
||
storagebox_uid: "999"
|
||
storagebox_gid: "999"
|