ansible is its own repo now

.drone.star

@@ -0,0 +1,22 @@
+
+def main(ctx):
+    return {
+        "kind": "pipeline",
+        "type": "docker",
+        "name": "nomad-nummer5",
+        "platform": 
+            {
+                "os": "linux",
+                "arch": "arm64"
+            }
+        ,
+        "steps": [
+            {
+                "name": "git log",
+                "image": "cr.wks/debian-stable",
+                "commands": [
+                    "git diff-tree --no-commit-id --name-only HEAD -r"
+                ]
+            }
+        ]
+    }

.project

@@ -5,7 +5,13 @@
 	<projects>
 	</projects>
 	<buildSpec>
+		<buildCommand>
+			<name>org.python.pydev.PyDevBuilder</name>
+			<arguments>
+			</arguments>
+		</buildCommand>
 	</buildSpec>
 	<natures>
+		<nature>org.python.pydev.pythonNature</nature>
 	</natures>
 </projectDescription>

.pydevproject

@@ -0,0 +1,5 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<?eclipse-pydev version="1.0"?><pydev_project>
+    <pydev_property name="org.python.pydev.PYTHON_PROJECT_INTERPRETER">Default</pydev_property>
+    <pydev_property name="org.python.pydev.PYTHON_PROJECT_VERSION">python interpreter</pydev_property>
+</pydev_project>

README.md

@@ -13,6 +13,11 @@
 * https://docs.oracle.com/en/learn/ol-linux-bonding/#for-additional-information - Bonding with Networkmanager
 * u-boot-env: https://forum.armbian.com/topic/35780-with-new-uboot-env-esspressobin-v5-does-not-boot/
 
+## adm01
+
+* ``podman run -d --replace --pull=always --expose=5001 -p 127.0.0.1:5001:5001 --mount=type=bind,source=/etc/docker/registry-cache/config.yml,destination=/etc/docker/registry/config.yml --mount=type=bind,source=/data/container-dr-mirror,destination=/var/lib/registry --tz=Europe/Berlin --name=container-docker-mirror docker.io/library/registry:2``
+* ``podman run --restart=always -d --replace --pull=always --expose=5000 -p 5000:5000 --mount=type=bind,source=/etc/docker/registry/config.yml,destination=/etc/docker/registry/config.yml --mount=type=bind,source=/data/container-registry,destination=/var/lib/registry --tz=Europe/Berlin --name=container-registry docker.io/library/registry:2``
+
 
 # Datacenter: ring86
 ## Podman tricks

apps/apt-cacher-ng/volume.hcl

@@ -10,7 +10,7 @@ capability {
 }
 
 context {
-  server = "ebin02.wks"
+  server = "ebin01.wks"
   share = "/data/raid1-ssd/app-data/apt-cacher-ng"
   mountPermissions = "0"  
 }

apps/dmarc/live.hcl

@@ -43,7 +43,7 @@ job "dmarc" {
         REPORT_DB_TYPE                  = "pgsql"
         REPORT_DB_HOST                  = "postgres.service.nr5"
         REPORT_DB_PORT                  = "5432"
-        REPORT_DB_NAME                  = "dmarc-srg"
+        REPORT_DB_NAME                  = "dmarc"
         REPORT_DB_USER                  = "dmarc"
         REPORT_DB_PASS                  = "4XSS4gKpheSBoMsIs"
         PARSER_IMAP_PORT                = "143"

apps/docker-registry/live-ui.hcl

@@ -3,7 +3,7 @@ job "docker-registry-ui" {
     "nummer5",
   ]
   type = "service"
-  node_pool = "apps"
+  node_pool = "sys"
 
   group "apps" {
     count = 1

apps/drone/live-runner.hcl

@@ -13,7 +13,6 @@ job "drone-runner" {
       port "http" {
         to = 3000
       }
-
     }
     volume "drone-runner" {
       type      = "csi"
@@ -26,6 +25,11 @@ job "drone-runner" {
     service {
         name = "drone-runner"
         port = "http"
+        
+        tags = [
+          "traefik.enable=true",
+          "traefik.http.routers.drone-runner.rule=Host(`drone-runner.service.nr5`)",
+        ]
     }
 
     restart {
@@ -38,7 +42,7 @@ job "drone-runner" {
 
       config {
         image = "docker.io/drone/drone-runner-docker:latest"
-        force_pull = false 
+        force_pull = true 
         ports = ["http"]
         privileged = true
         volumes = [
@@ -49,7 +53,7 @@ job "drone-runner" {
       }
       volume_mount {
         volume      = "drone-runner"
-        destination = "/var/lib/docker"
+        destination = "/drone"
         read_only   = false
       }
 
@@ -60,14 +64,21 @@ job "drone-runner" {
         DRONE_RPC_HOST            = "drone.service.nr5"
         DRONE_RPC_PROTO           = "http"
         DRONE_RUNNER_CAPACITY     = 1
-        DRONE_LOGS_DEBUG          = false 
-        DRONE_LOGS_TRACE          = false
+        DRONE_LOGS_DEBUG          = true 
+        DRONE_LOGS_TRACE          = true
+        DRONE_TRACE               = true
         DOCKER_BUILDKIT           = 1
+        DRONE_GIT_ALWAYS_AUTH     = true
+        DRONE_UI_DISABLE          = false
+        DRONE_UI_USERNAME         = "root"
+        DRONE_UI_PASSWORD         = "root"
+        DRONE_RUNNER_CLONE_IMAGE  = "drone/git"
+        DRONE_RUNNER_VOLUMES      = "/etc/resolv.conf:/etc/resolv.conf"
       }
 
       resources {
-        cpu    = 300
-        memory = 500 
+        cpu    = 2000
+        memory = 1024 
       }
 
     }

apps/drone/live.hcl

@@ -14,7 +14,6 @@ job "drone" {
       port "http" {
         to = 80
       }
-
     }
     
     service {
@@ -57,6 +56,7 @@ job "drone" {
 
       config {
         image = "docker.io/drone/drone:latest"
+	    force_pull = true
         ports = ["http"]
       }
 
@@ -65,11 +65,12 @@ job "drone" {
         DRONE_GIT_ALWAYS_AUTH     = true
         DRONE_GITEA_SERVER        = "http://gitea.service.nr5"
         DRONE_GITEA_CLIENT_ID     = "6c48da2c-2748-438e-b776-51f41d3fe607"
-        DRONE_GITEA_CLIENT_SECRET = "gto_ewohqwympejkb52veheox6doc4juodojyyvph4yf4gekhgtx7zna"
+        DRONE_GITEA_CLIENT_SECRET = "gto_shthxcqiqutd4f3quejnpefgbedaewfqnnkdi3cfmsdoxjq7qfsq"
         DRONE_RPC_SECRET          = "7eb685ed81d0c34bafc5efa7783c20b2"
         DRONE_SERVER_HOST         = "drone.service.nr5"
         DRONE_SERVER_PROTO        = "http"
         DRONE_JSONNET_ENABLED     = true
+        DRONE_STARLARK_ENABLED    = true
         DRONE_LOGS_DEBUG          = true 
         DRONE_LOGS_TRACE          = true
         DRONE_USER_CREATE         = "username:do,admin:true"

apps/drone/volume.hcl

@@ -10,7 +10,7 @@ capability {
 }
 
 context {
-  server = "ebin02.wks"
+  server = "ebin01.wks"
   share = "/data/raid1-ssd/app-data/drone-data"
   mountPermissions = "0"  
 }

apps/gitea/live.hcl

@@ -47,6 +47,7 @@ job "gitea" {
     }
 
     restart {
+      interval = "10m"
       attempts = 5
       delay    = "30s"
     }
@@ -61,7 +62,7 @@ job "gitea" {
       }
 
       config {
-        image = "docker.io/gitea/gitea:latest"
+        image = "docker.io/gitea/gitea"
         ports = ["ssh", "http"]
         force_pull = true 
       }
@@ -89,7 +90,7 @@ job "gitea" {
       }
 
       resources {
-        cpu    = 200
+        cpu    = 500
         memory = 512
       }
 

apps/gitea/volume.hcl

@@ -10,7 +10,7 @@ capability {
 }
 
 context {
-  server = "ebin02.wks"
+  server = "ebin01.wks"
   share = "/data/raid1-ssd/app-data/gitea-data"
   mountPermissions = "0"  
 }

apps/homer/live.hcl

@@ -35,7 +35,7 @@ job "homer" {
       driver = "podman"
 
       config {
-        image = "b4bz/homer:latest"
+        image = "docker.io/b4bz/homer:latest"
         ports = ["http"]
       }
       

apps/openwrt/live.hcl

@@ -1,6 +1,6 @@
 job "openwrt" {
   datacenters = ["nummer5"]
-  node_pool = "apps"
+  node_pool = "sys"
   priority = 10
 
   group "apps" {

apps/postgresql/live.hcl

@@ -3,7 +3,12 @@ job "postgres" {
   type = "service"
   node_pool = "sys"
   priority  = 80
-
+  
+  #constraint {
+  #  attribute = "${attr.unique.hostname}"
+  #  value = "pine01" 
+  #}
+  
   group "service" {
     count = 1
     volume "postgres-data" {
@@ -15,7 +20,7 @@ job "postgres" {
     }
     
     network {
-        mode = "host"
+        #mode = "host"
         port "postgres"{
           static = 5432
         }
@@ -23,10 +28,10 @@ job "postgres" {
     service {
         name = "postgres"
         port = "postgres"
-        #tags = [
-        #    "traefik.enable=true",
-        #    "traefik.tcp.routers.postgres.rule=Host(`postgres.service.nr5`)",
-        #]
+        tags = [
+            "traefik.enable=true",
+            "traefik.tcp.routers.postgres.rule=Host(`postgres.service.nr5`)",
+        ]
     }
     task "postgres" {
       driver = "podman"
@@ -49,8 +54,8 @@ job "postgres" {
       }
       
       resources {
-        cpu = 1000
-        memory = 512
+        cpu = 3500
+        memory = 1500
 
       }
     

bin/hosts.conf

@@ -1,2 +1,2 @@
-hosts="pine01.wks pine02.wks pine03.wks pine04.wks pine05.wks adm01.wks ebin01.wks ebin02.wks"
+hosts="adm01.wks pine01.wks pine02.wks pine03.wks pine04.wks pine05.wks ebin01.wks ebin02.wks drucki.wks switch_cloud.wks drucki_switch.wks"
 domain="wks"