a5343760e1
Some checks failed
CI Pipeline / Rust Format Check (push) Successful in 4s
CI Pipeline / Clippy Lints (push) Successful in 51s
CI Pipeline / Rust Unit Tests (push) Failing after 1m20s
CI Pipeline / Security Audit (push) Successful in 5s
CI Pipeline / Frontend Lint & Type Check (push) Successful in 15s
CI Pipeline / Build .deb & Release (push) Has been skipped
- debian/control: add Pre-Depends and Depends on postgresql-16, argon2 - debian/postinst: idempotent automation for PostgreSQL setup, DB/user creation, migration tracking, admin password generation, config write, and service enable/start - Dockerfile: multi-stage build (Rust + frontend + slim runtime) - docker/entrypoint.sh: first-run DB wait, migrations, admin password - docker-compose.yml: split db/app architecture with healthcheck - .env.example: template for DB_PASSWORD and TAG - .dockerignore: exclude build artifacts from Docker context - .github/workflows/ci.yml: add Docker job for multi-arch (amd64/arm64) GHCR push on tag releases with layer caching - .gitignore: add .env entry
59 lines
1.5 KiB
YAML
59 lines
1.5 KiB
YAML
# =============================================================================
|
|
# Linux Patch Manager — Docker Compose Deployment
|
|
# =============================================================================
|
|
# Usage:
|
|
# cp .env.example .env # Edit DB_PASSWORD
|
|
# docker compose up -d
|
|
# =============================================================================
|
|
|
|
services:
|
|
db:
|
|
image: postgres:16-bookworm
|
|
restart: unless-stopped
|
|
environment:
|
|
POSTGRES_USER: patch_manager
|
|
POSTGRES_PASSWORD: ${DB_PASSWORD}
|
|
POSTGRES_DB: patch_manager
|
|
volumes:
|
|
- pgdata:/var/lib/postgresql/data
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U patch_manager -d patch_manager"]
|
|
interval: 5s
|
|
timeout: 5s
|
|
retries: 10
|
|
start_period: 10s
|
|
networks:
|
|
- patch-manager-net
|
|
|
|
app:
|
|
image: ghcr.io/draco-lunaris/linux-patch-manager:${TAG:-latest}
|
|
restart: unless-stopped
|
|
depends_on:
|
|
db:
|
|
condition: service_healthy
|
|
ports:
|
|
- "443:443"
|
|
environment:
|
|
DATABASE_URL: postgres://patch_manager:${DB_PASSWORD}@db:5432/patch_manager
|
|
PATCH_MANAGER_CONFIG: /etc/patch-manager/config.toml
|
|
volumes:
|
|
- pm-config:/etc/patch-manager
|
|
- pm-logs:/var/log/patch-manager
|
|
- pm-data:/opt/patch-manager
|
|
networks:
|
|
- patch-manager-net
|
|
|
|
volumes:
|
|
pgdata:
|
|
driver: local
|
|
pm-config:
|
|
driver: local
|
|
pm-logs:
|
|
driver: local
|
|
pm-data:
|
|
driver: local
|
|
|
|
networks:
|
|
patch-manager-net:
|
|
driver: bridge
|