238 lines
8.3 KiB
YAML
238 lines
8.3 KiB
YAML
version: '3.7'
|
|
|
|
services:
|
|
gitlab:
|
|
image: ${DOCKER_IMAGE_GITLAB}
|
|
container_name: ${SERVICE_NAME}_${CONTAINER_NAME_GITLAB}
|
|
restart: always
|
|
depends_on:
|
|
- postgresql
|
|
- redis
|
|
ports:
|
|
- "${GITLAB_SSH_PORT}:22"
|
|
# - 80:80
|
|
# - 443:443
|
|
expose:
|
|
- 80
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.http.routers.gitlab-rm-server.entrypoints=https"
|
|
- "traefik.http.routers.gitlab-rm-server.rule=Host(`${GITLAB_HOST}`)"
|
|
- "traefik.http.routers.gitlab-rm-server.tls=true"
|
|
- "traefik.http.routers.gitlab-rm-server.tls.certresolver=letsEncrypt"
|
|
- "traefik.http.services.gitlab-rm-server-service.loadbalancer.server.port=80"
|
|
- "traefik.docker.network=webproxy"
|
|
volumes:
|
|
- ${SERVICE_DATA}/${SERVICE_NAME}/gitlab:/home/git/data:Z
|
|
- ./ssl-certs:/certs
|
|
environment:
|
|
- DEBUG=false
|
|
|
|
- DB_ADAPTER=postgresql
|
|
- DB_HOST=${SERVICE_NAME}_${CONTAINER_NAME_PGSQL}
|
|
- DB_PORT=5432
|
|
- DB_USER=${DB_USER}
|
|
- DB_PASS=${DB_PASS}
|
|
- DB_NAME=${DB_NAME}
|
|
|
|
- REDIS_HOST=${SERVICE_NAME}_${CONTAINER_NAME_REDIS}
|
|
- REDIS_PORT=6379
|
|
|
|
- TZ=UTC
|
|
- GITLAB_TIMEZONE=${GITLAB_TIMEZONE}
|
|
|
|
- GITLAB_HTTPS=true
|
|
- SSL_SELF_SIGNED=false
|
|
|
|
- GITLAB_HOST=${GITLAB_HOST}
|
|
- GITLAB_PORT=443
|
|
- GITLAB_SSH_PORT=${GITLAB_SSH_PORT}
|
|
- GITLAB_SECRETS_DB_KEY_BASE=${GITLAB_SECRETS_DB_KEY_BASE}
|
|
- GITLAB_SECRETS_SECRET_KEY_BASE=${GITLAB_SECRETS_SECRET_KEY_BASE}
|
|
- GITLAB_SECRETS_OTP_KEY_BASE=${GITLAB_SECRETS_OTP_KEY_BASE}
|
|
|
|
- GITLAB_ROOT_PASSWORD=${GITLAB_ROOT_PASSWORD}
|
|
- GITLAB_ROOT_EMAIL=${GITLAB_ROOT_EMAIL}
|
|
|
|
- GITLAB_NOTIFY_ON_BROKEN_BUILDS=true
|
|
- GITLAB_NOTIFY_PUSHER=false
|
|
|
|
- GITLAB_EMAIL=${GITLAB_EMAIL}
|
|
- GITLAB_EMAIL_REPLY_TO=${GITLAB_EMAIL_REPLY_TO}
|
|
- GITLAB_INCOMING_EMAIL_ADDRESS=${GITLAB_INCOMING_EMAIL_ADDRESS}
|
|
|
|
- GITLAB_PAGES_ENABLED=false
|
|
|
|
- SMTP_ENABLED=${SMTP_ENABLED}
|
|
# - SMTP_DOMAIN=${SMTP_DOMAIN}
|
|
# - SMTP_HOST=${SMTP_HOST}
|
|
# - SMTP_PORT=${SMTP_PORT}
|
|
# - SMTP_USER=${SMTP_USER}
|
|
# - SMTP_PASS=${SMTP_PASS}
|
|
# - SMTP_STARTTLS=${SMTP_STARTTLS}
|
|
# - SMTP_AUTHENTICATION=${SMTP_AUTHENTICATION}
|
|
|
|
- IMAP_ENABLED=false
|
|
|
|
- LDAP_ENABLED=${LDAP_ENABLED}
|
|
- LDAP_LABEL=${LDAP_LABEL}
|
|
- LDAP_HOST=${LDAP_HOST}
|
|
- LDAP_PORT=${LDAP_PORT}
|
|
- LDAP_UID=${LDAP_UID}
|
|
- LDAP_METHOD=${LDAP_METHOD}
|
|
- LDAP_VERIFY_SSL=${LDAP_VERIFY_SSL}
|
|
- LDAP_ACTIVE_DIRECTORY=${LDAP_ACTIVE_DIRECTORY}
|
|
- LDAP_BASE=${LDAP_BASE}
|
|
- LDAP_USER_FILTER=${LDAP_USER_FILTER}
|
|
- LDAP_BIND_DN=${LDAP_BIND_DN}
|
|
- LDAP_PASS=${LDAP_PASS}
|
|
|
|
- GITLAB_REGISTRY_ENABLED=true
|
|
- GITLAB_REGISTRY_HOST=${REGISTRY_HOST}
|
|
- GITLAB_REGISTRY_API_URL=http://registry:5000/
|
|
- GITLAB_REGISTRY_KEY_PATH=/certs/registry.key
|
|
healthcheck:
|
|
test: ["CMD", "/usr/local/sbin/healthcheck"]
|
|
interval: 1m
|
|
timeout: 5s
|
|
retries: 5
|
|
start_period: 2m
|
|
networks:
|
|
- ${WEBPROXY_NETWORK}
|
|
- ${SERVICE_NETWORK}
|
|
|
|
registry:
|
|
image: ${DOCKER_IMAGE_REGISTRY}
|
|
container_name: ${SERVICE_NAME}_${CONTAINER_NAME_REGISTRY}
|
|
restart: always
|
|
expose:
|
|
- 5000
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.http.routers.gitlab-rm-registry.entrypoints=https"
|
|
- "traefik.http.routers.gitlab-rm-registry.rule=Host(`${REGISTRY_HOST}`)"
|
|
- "traefik.http.routers.gitlab-rm-registry.tls=true"
|
|
- "traefik.http.routers.gitlab-rm-registry.tls.certresolver=letsEncrypt"
|
|
- "traefik.http.services.gitlab-rm-registry-service.loadbalancer.server.port=5000"
|
|
- "traefik.docker.network=webproxy"
|
|
volumes:
|
|
- ${SERVICE_DATA}/${SERVICE_NAME}/gitlab/shared/registry:/registry
|
|
- ./ssl-certs:/certs
|
|
environment:
|
|
- REGISTRY_AUTH_TOKEN_AUTOREDIRECT=false
|
|
- REGISTRY_LOG_LEVEL=debug
|
|
- REGISTRY_STORAGE_FILESYSTEM_ROOTDIRECTORY=/registry
|
|
- REGISTRY_AUTH_TOKEN_REALM=https://${GITLAB_HOST}/jwt/auth
|
|
- REGISTRY_AUTH_TOKEN_SERVICE=container_registry
|
|
- REGISTRY_AUTH_TOKEN_ISSUER=gitlab-issuer
|
|
- REGISTRY_AUTH_TOKEN_ROOTCERTBUNDLE=/certs/registry.crt
|
|
- REGISTRY_STORAGE_DELETE_ENABLED=true
|
|
# - REGISTRY_STORAGE=s3
|
|
# - REGISTRY_STORAGE_S3_ACCESSKEY=${REGISTRY_STORAGE_S3_ACCESSKEY}
|
|
# - REGISTRY_STORAGE_S3_SECRETKEY=${REGISTRY_STORAGE_S3_SECRETKEY}
|
|
# - REGISTRY_STORAGE_S3_REGIONENDPOINT=${REGISTRY_STORAGE_S3_REGIONENDPOINT}
|
|
# - REGISTRY_STORAGE_S3_REGION=${REGISTRY_STORAGE_S3_REGION}
|
|
# - REGISTRY_STORAGE_S3_BUCKET=${REGISTRY_STORAGE_S3_BUCKET}
|
|
# - REGISTRY_STORAGE_CACHE_BLOBDESCRIPTOR=inmemory
|
|
networks:
|
|
- ${WEBPROXY_NETWORK}
|
|
- ${SERVICE_NETWORK}
|
|
|
|
postgresql:
|
|
image: ${DOCKER_IMAGE_PGSQL}
|
|
container_name: ${SERVICE_NAME}_${CONTAINER_NAME_PGSQL}
|
|
restart: always
|
|
environment:
|
|
- POSTGRESQL_USERNAME=${DB_USER}
|
|
- POSTGRESQL_PASSWORD=${DB_PASS}
|
|
- POSTGRESQL_DATABASE=${DB_NAME}
|
|
- POSTGRESQL_SHARED_PRELOAD_LIBRARIES=pg_trgm,btree_gist
|
|
volumes:
|
|
- postgresql_data:/bitnami/postgresql/:Z
|
|
networks:
|
|
- ${SERVICE_NETWORK}
|
|
|
|
redis:
|
|
restart: always
|
|
image: ${DOCKER_IMAGE_REDIS}
|
|
container_name: ${SERVICE_NAME}_${CONTAINER_NAME_REDIS}
|
|
command:
|
|
- --loglevel warning
|
|
volumes:
|
|
- ${SERVICE_DATA}/${SERVICE_NAME}/redis:/var/lib/redis:Z
|
|
networks:
|
|
- ${SERVICE_NETWORK}
|
|
|
|
runner_1:
|
|
image: ${DOCKER_IMAGE_RUNNER}
|
|
container_name: ${SERVICE_NAME}_${CONTAINER_NAME_RUNNER}_1
|
|
restart: always
|
|
depends_on:
|
|
- gitlab
|
|
volumes:
|
|
- ${SERVICE_DATA}/${SERVICE_NAME}/gitlab-runner_1:/etc/gitlab-runner
|
|
- /var/run/docker.sock:/var/run/docker.sock
|
|
command: --debug run --user=gitlab-runner --working-directory=/home/gitlab-runner
|
|
environment:
|
|
- CI_SERVER_URL=https://${GITLAB_HOST}
|
|
- CI_SERVER_LOCAL_IP=${CI_SERVER_LOCAL_IP}
|
|
- CI_SERVER_WITH_RUNNER=${CI_SERVER_WITH_RUNNER}
|
|
- RUNNER_TOKEN=${RUNNER_TOKEN}
|
|
- RUNNER_DESCRIPTION=gitab-runner_1
|
|
- RUNNER_EXECUTOR=docker
|
|
- DOCKER_IMAGE=gitlab/gitlab-runner-helper:x86_64-latest
|
|
networks:
|
|
- ${SERVICE_NETWORK}
|
|
|
|
runner_2:
|
|
image: ${DOCKER_IMAGE_RUNNER}
|
|
container_name: ${SERVICE_NAME}_${CONTAINER_NAME_RUNNER}_2
|
|
restart: always
|
|
depends_on:
|
|
- gitlab
|
|
volumes:
|
|
- ${SERVICE_DATA}/${SERVICE_NAME}/gitlab-runner_2:/etc/gitlab-runner
|
|
- /var/run/docker.sock:/var/run/docker.sock
|
|
command: --debug run --user=gitlab-runner --working-directory=/home/gitlab-runner
|
|
environment:
|
|
- CI_SERVER_URL=https://${GITLAB_HOST}
|
|
- CI_SERVER_WITH_RUNNER=${CI_SERVER_WITH_RUNNER}
|
|
- CI_SERVER_LOCAL_IP=${CI_SERVER_LOCAL_IP}
|
|
- RUNNER_TOKEN=${RUNNER_TOKEN}
|
|
- RUNNER_DESCRIPTION=gitab-runner_2
|
|
- RUNNER_EXECUTOR=docker
|
|
- DOCKER_IMAGE=gitlab/gitlab-runner-helper:x86_64-latest
|
|
networks:
|
|
- ${SERVICE_NETWORK}
|
|
|
|
# backup:
|
|
# image: ${DOCKER_IMAGE_BACKUP}
|
|
# restart: always
|
|
# container_name: ${SERVICE_NAME}_${CONTAINER_NAME_BACKUP}
|
|
# command: gitlab backup --storage S3://<BACKBLAZE-MOUNT-POINT>/gitlab --online
|
|
# volumes:
|
|
# - /var/run/docker.sock:/var/run/docker.sock
|
|
# - ${SERVICE_DATA}/${SERVICE_NAME}/gitlab/backups:${BACKUP_DIR}:Z
|
|
# - ${DOCKER_COMPOSE_DIR}:${DOCKER_COMPOSE_DIR}
|
|
# environment:
|
|
# - BACKUP_SCHEDULE=${BACKUP_SCHEDULE}
|
|
# - BACKUP_DIR=${BACKUP_DIR}
|
|
# - DOCKER_COMPOSE_DIR=${DOCKER_COMPOSE_DIR}
|
|
# - ${SERVICE_NETWORK}
|
|
# - CONTAINER_NAME_GITLAB=${CONTAINER_NAME_GITLAB}
|
|
# - S3_HOST_BASE=${S3_HOST_BASE}
|
|
# - S3_ACCOUNT_ID=${S3_ACCOUNT_ID}
|
|
# - S3_APPLICATION_KEY=${S3_APPLICATION_KEY}
|
|
# networks:
|
|
# - ${SERVICE_NETWORK}
|
|
|
|
networks:
|
|
service:
|
|
name: ${SERVICE_NETWORK}
|
|
webproxy:
|
|
external:
|
|
name: ${WEBPROXY_NETWORK}
|
|
|
|
volumes:
|
|
postgresql_data:
|
|
driver: local |