-
Notifications
You must be signed in to change notification settings - Fork 74
/
stack.yml.in
112 lines (108 loc) · 3.59 KB
/
stack.yml.in
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
version: '3.1'
volumes:
data:
capnp-secrets:
gitlab-data:
gitlab-capnp-secrets:
secrets:
ocaml-ci-github-key:
external: true
ocaml-ci-oauth:
external: true
ocaml-ci-submission-cap:
external: true
ocaml-ci-webhook-secret:
external: true
ocaml-ci-gitlab-oauth:
external: true
ocaml-ci-gitlab-token:
external: true
ocaml-ci-gitlab-webhook-secret:
external: true
ocaml-ci-solver-cap:
external: true
services:
ci:
image: ocurrent/ocaml-ci-service:live
# image: ocaml-ci-service
# For local deploys using docker -c ocaml.ci.dev build -t ocaml-ci-service -f Dockerfile .
command: >
--github-app-id 39151
--github-private-key-file /run/secrets/ocaml-ci-github-key
--github-oauth /run/secrets/ocaml-ci-oauth
--github-webhook-secret-file /run/secrets/ocaml-ci-webhook-secret
--confirm above-average
--confirm-auto-release 120
--capnp-public-address=tcp:ocaml.ci.dev:8102 --capnp-listen-address=tcp:0.0.0.0:9000
--submission-service /run/secrets/ocaml-ci-submission-cap
--submission-solver-service /run/secrets/ocaml-ci-solver-cap
--submission-query-service /run/secrets/ocaml-ci-submission-cap
--migration-path /migrations
--verbosity info
--github-account-allowlist GITHUB_ORGANISATIONS
environment:
- "CAPNP_PROFILE=production"
- "PLATFORMS=all"
- "DOCKER_BUILDKIT=1"
- "PROGRESS_NO_TRUNC=1"
ports:
- '8102:9000'
volumes:
- 'data:/var/lib/ocurrent'
- '/var/run/docker.sock:/var/run/docker.sock'
- 'capnp-secrets:/capnp-secrets'
secrets:
- 'ocaml-ci-oauth'
- 'ocaml-ci-github-key'
- 'ocaml-ci-submission-cap'
- 'ocaml-ci-solver-cap'
- 'ocaml-ci-webhook-secret'
sysctls:
- 'net.ipv4.tcp_keepalive_time=60'
gitlab:
image: ocurrent/ocaml-ci-gitlab-service:live
# image: ocaml-ci-gitlab-service
# For local deploys using docker -c ocaml.ci.dev build -t ocaml-ci-gitlab-service -f Dockerfile.gitlab .
command: >
--gitlab-oauth /run/secrets/ocaml-ci-gitlab-oauth
--gitlab-token-file /run/secrets/ocaml-ci-gitlab-token
--gitlab-webhook-secret-file /run/secrets/ocaml-ci-gitlab-webhook-secret
--submission-service /run/secrets/ocaml-ci-submission-cap
--submission-solver-service /run/secrets/ocaml-ci-solver-cap
--submission-query-service /run/secrets/ocaml-ci-submission-cap
--capnp-public-address=tcp:ocaml.ci.dev:8202
--capnp-listen-address=tcp:0.0.0.0:9000
--migration-path /migrations
--verbosity info
environment:
- "CAPNP_PROFILE=production"
- "PLATFORMS=all"
- "DOCKER_BUILDKIT=1"
- "PROGRESS_NO_TRUNC=1"
ports:
- '8202:9000'
volumes:
- 'gitlab-data:/var/lib/ocurrent'
- '/var/run/docker.sock:/var/run/docker.sock'
- 'gitlab-capnp-secrets:/capnp-secrets'
secrets:
- 'ocaml-ci-gitlab-oauth'
- 'ocaml-ci-gitlab-token'
- 'ocaml-ci-submission-cap'
- 'ocaml-ci-solver-cap'
- 'ocaml-ci-gitlab-webhook-secret'
sysctls:
- 'net.ipv4.tcp_keepalive_time=60'
web:
image: ocurrent/ocaml-ci-web:live
# image: ocaml-ci-web
# For local deploys using docker -c ocaml.ci.dev build -t ocaml-ci-web -f Dockerfile.web .
command: >
--backend /capnp-secrets/ocaml-ci-admin.cap
--gitlab-backend /gitlab-capnp-secrets/ocaml-ci-gitlab-admin.cap
--listen-prometheus=9090
volumes:
- 'capnp-secrets:/capnp-secrets:ro'
- 'gitlab-capnp-secrets:/gitlab-capnp-secrets:ro'
sysctls:
- 'net.ipv4.tcp_keepalive_time=60'