Murat ÖZDEMİR
ed51b6eedd
- Add new Ansible role `wireguard` to set up WireGuard VPN server on DB node with key generation, firewalld rules, and client peer config. - Introduce `pg-proxy` and `mongo-proxy` socat containers in db_stack to expose PostgreSQL (15432) and MongoDB (17017) on host ports, restricted to WireGuard subnet via firewalld. - Update test environment group_vars with WireGuard client entry for `murat-inspiron-15-3525`. - Modify act_runner config: set `docker_host` to unix socket, remove explicit socket mount from options, and change runner label image to `catthehacker/ubuntu:act-22.04`. - Open UDP port 51820 in Hetzner firewall for WireGuard inbound. - Adjust test-db-post-stack playbook to include wireguard role (tagged). - Update roadmap document with APISIX init step order.
10 lines
497 B
YAML
10 lines
497 B
YAML
---
|
||
act_runner_version: "0.2.12"
|
||
act_runner_arch: "linux-amd64"
|
||
act_runner_gitea_url: "https://git.tarla.io"
|
||
# -> bunu değişkene ata ve test ve prod için farklı isimler oluştur!
|
||
act_runner_name: "iklim-test-app"
|
||
act_runner_labels: "ubuntu-latest,ubuntu-22.04,ubuntu-20.04,test-runner:docker://catthehacker/ubuntu:act-22.04"
|
||
# Gitea'dan alınan tek seferlik registration token; kayıt olmadıysa boş bırakılır.
|
||
act_runner_registration_token: "{{ vault_gitea_runner_token | default('') }}"
|