Murat ÖZDEMİR
51933afea6
Moves `iklimco-net` overlay network creation to be managed by the Docker Swarm stack, ensuring reliable embedded DNS resolution for inter-service communication. This resolves issues where services on external overlay networks failed to discover each other via Docker DNS. This refactoring includes: * Removing the manual `iklimco-net` creation from the Ansible `swarm` role. * Adjusting `act_runner` configuration to connect job containers to `iklimco-net` only after the stack has deployed and created the network. * Setting `storagebox_file_mode` to `0600` for DB nodes to prevent "too open" errors with MongoDB keyfiles. * Provisioning dedicated bind mount directories for MongoDB and PostgreSQL on DB nodes with correct ownership and permissions. * Updating documentation to reflect the consolidated stack and network changes.
41 lines
940 B
Django/Jinja
41 lines
940 B
Django/Jinja
log:
|
||
level: info
|
||
|
||
runner:
|
||
file: .runner
|
||
capacity: 1
|
||
timeout: 3h
|
||
insecure: false
|
||
fetch_timeout: 5s
|
||
fetch_interval: 2s
|
||
labels:
|
||
{% for label in act_runner_labels.split(',') %}
|
||
- "{{ label }}"
|
||
{% endfor %}
|
||
|
||
cache:
|
||
enabled: true
|
||
dir: ""
|
||
host: ""
|
||
port: 0
|
||
external_server: ""
|
||
|
||
container:
|
||
# Job containers start on bridge. The deploy workflow connects them to iklimco-net
|
||
# after the stack is deployed (so iklimco-net exists before the runner tries to use it).
|
||
network: "bridge"
|
||
enable_ipv6: false
|
||
privileged: false
|
||
options: "-v /mnt/storagebox:/mnt/storagebox"
|
||
workdir_parent: ""
|
||
valid_volumes:
|
||
- "/mnt/storagebox"
|
||
# Docker 29.5.2 ile /var/run -> /run symlink kaynaklı "mkdirat var/run: file exists"
|
||
# hatası giderildi; socket job container'lara mount edilebilir hale geldi.
|
||
docker_host: "unix:///var/run/docker.sock"
|
||
force_pull: false
|
||
force_rebuild: false
|
||
|
||
host:
|
||
workdir_parent: ""
|