This commit is contained in:
Semaphore
2026-02-17 10:49:59 +00:00
2 changed files with 49 additions and 55 deletions

View File

@@ -1,54 +1,46 @@
networks: networks:
tugtainer_agent: tugtainer_agent:
driver: bridge driver: bridge
services: services:
# Socket proxy is used by default, socket-proxy:
# but you can mount docker socket directly image: lscr.io/linuxserver/socket-proxy:latest
# and remove this service and DOCKER_HOST variable container_name: socket-proxy
socket-proxy: environment:
image: lscr.io/linuxserver/socket-proxy:latest CONTAINERS: 1
container_name: socket-proxy EVENTS: 1
environment: IMAGES: 1
CONTAINERS: 1 INFO: 1
EVENTS: 1 LOG_LEVEL: warning
IMAGES: 1 PING: 1
INFO: 1 NETWORKS: 1
LOG_LEVEL: warning POST: 1
PING: 1 TZ: Europe/Paris
NETWORKS: 1 VERSION: 1
POST: 1 volumes:
TZ: Europe/Paris - /var/run/docker.sock:/var/run/docker.sock:ro
VERSION: 1 restart: unless-stopped
volumes: read_only: true
- /var/run/docker.sock:/var/run/docker.sock:ro tmpfs:
restart: unless-stopped - /run
read_only: true networks:
tmpfs: - tugtainer_agent
- /run labels:
networks: dev.quenary.tugtainer.protected: True
- tugtainer_agent agent:
labels: depends_on:
dev.quenary.tugtainer.protected: True - socket-proxy
agent: container_name: tugtainer-agent
depends_on: image: quenary/tugtainer-agent:latest
- socket-proxy restart: unless-stopped
container_name: tugtainer-agent environment:
image: quenary/tugtainer-agent:latest AGENT_SECRET: ${AGENT_SECRET}
# volumes: DOCKER_HOST: tcp://socket-proxy:2375
# You can uncomment this to mount socket directly, read_only: true
# and remove socket-proxy service and DOCKER_HOST variable tmpfs:
# - /var/run/docker.sock:/var/run/docker.sock:ro - /run
restart: unless-stopped networks:
environment: - tugtainer_agent
# The list of available variables is in env.example ports:
AGENT_SECRET: Rackham59 - '9413:8001'
DOCKER_HOST: tcp://socket-proxy:2375 labels:
read_only: true dev.quenary.tugtainer.protected: True
tmpfs:
- /run
networks:
- tugtainer_agent
ports:
- '9413:8001'
labels:
dev.quenary.tugtainer.protected: True

View File

@@ -9,7 +9,9 @@
- name: Set .env file - name: Set .env file
copy: copy:
content: "HOSTNAME={{ inventory_hostname }}" content: |
HOSTNAME={{ inventory_hostname }}
AGENT_SECRET={{ agent_secret | default('') }}
dest: /opt/{{ service_name }}/.env dest: /opt/{{ service_name }}/.env
- name: Copy compose files - name: Copy compose files