Murat ÖZDEMİR
ed51b6eedd
- Add new Ansible role `wireguard` to set up WireGuard VPN server on DB node with key generation, firewalld rules, and client peer config. - Introduce `pg-proxy` and `mongo-proxy` socat containers in db_stack to expose PostgreSQL (15432) and MongoDB (17017) on host ports, restricted to WireGuard subnet via firewalld. - Update test environment group_vars with WireGuard client entry for `murat-inspiron-15-3525`. - Modify act_runner config: set `docker_host` to unix socket, remove explicit socket mount from options, and change runner label image to `catthehacker/ubuntu:act-22.04`. - Open UDP port 51820 in Hetzner firewall for WireGuard inbound. - Adjust test-db-post-stack playbook to include wireguard role (tagged). - Update roadmap document with APISIX init step order.
42 lines
944 B
Django/Jinja
42 lines
944 B
Django/Jinja
log:
|
||
level: info
|
||
|
||
runner:
|
||
file: .runner
|
||
capacity: 1
|
||
timeout: 3h
|
||
insecure: false
|
||
fetch_timeout: 5s
|
||
fetch_interval: 2s
|
||
labels:
|
||
{% for label in act_runner_labels.split(',') %}
|
||
- "{{ label }}"
|
||
{% endfor %}
|
||
|
||
cache:
|
||
enabled: true
|
||
dir: ""
|
||
host: ""
|
||
port: 0
|
||
external_server: ""
|
||
|
||
container:
|
||
# Job container'ları iklimco-net overlay network'üne katılır;
|
||
# böylece iklim-db_postgresql ve iklim-db_mongodb servislerine direkt erişebilir.
|
||
network: "iklimco-net"
|
||
enable_ipv6: false
|
||
privileged: false
|
||
options: ""
|
||
workdir_parent: ""
|
||
valid_volumes:
|
||
- "/var/run/docker.sock"
|
||
# docker_host set edilince act_runner socket'i tek seferlik mount eder ve
|
||
# DOCKER_HOST env'ini job container'a iletir; options'daki manuel mount ile
|
||
# çakışıp "Duplicate mount point" hatasına yol açmaz.
|
||
docker_host: "unix:///var/run/docker.sock"
|
||
force_pull: false
|
||
force_rebuild: false
|
||
|
||
host:
|
||
workdir_parent: ""
|