Murat ÖZDEMİR
ed51b6eedd
- Add new Ansible role `wireguard` to set up WireGuard VPN server on DB node with key generation, firewalld rules, and client peer config. - Introduce `pg-proxy` and `mongo-proxy` socat containers in db_stack to expose PostgreSQL (15432) and MongoDB (17017) on host ports, restricted to WireGuard subnet via firewalld. - Update test environment group_vars with WireGuard client entry for `murat-inspiron-15-3525`. - Modify act_runner config: set `docker_host` to unix socket, remove explicit socket mount from options, and change runner label image to `catthehacker/ubuntu:act-22.04`. - Open UDP port 51820 in Hetzner firewall for WireGuard inbound. - Adjust test-db-post-stack playbook to include wireguard role (tagged). - Update roadmap document with APISIX init step order.
20 lines
653 B
YAML
20 lines
653 B
YAML
---
|
||
# 05 · Test runner ve deploy ön koşulları
|
||
#
|
||
# Ön koşul: Gitea arayüzünden (Organization → Settings → Actions → Runners)
|
||
# bir Registration Token alın ve group_vars/all/vault.yml içindeki
|
||
# vault_gitea_runner_token değişkenine ekleyin.
|
||
#
|
||
# ansible-playbook test-app-post-stack.yml --vault-password-file=.vault_pass
|
||
#
|
||
# Token tanımlı değilse kurulum tamamlanır ancak kayıt adımı atlanır.
|
||
# Sonraki çalıştırmada .runner dosyası varsa kayıt tekrar yapılmaz (idempotent).
|
||
|
||
- name: "App Node - Gitea runner ve deploy ön koşulları"
|
||
hosts: app
|
||
become: true
|
||
|
||
roles:
|
||
- role: act_runner
|
||
tags: [act_runner]
|