10 changed files with 315 additions and 159 deletions
@ -0,0 +1 @@ |
|||
volumes/*/ |
|||
@ -1,78 +1,136 @@ |
|||
version: '3.7' |
|||
services: |
|||
jenkins: |
|||
build: ./jenkins |
|||
container_name: jenkins |
|||
user: root |
|||
volumes: |
|||
- jenkins-log:/var/log/jenkins |
|||
- jenkins-data:/var/jenkins_home |
|||
- ./jenkins/downloads:/var/jenkins_home/downloads |
|||
- /var/run/docker.sock:/var/run/docker.sock |
|||
secrets: |
|||
- jenkins_admin_username |
|||
- jenkins_admin_password |
|||
# Nginx reverse proxy container |
|||
# Reference: |
|||
# https://github.com/jwilder/nginx-proxy |
|||
nginx-proxy: # TODO: maybe split this to the two underlying images? |
|||
image: jwilder/nginx-proxy |
|||
container_name: nginx-proxy |
|||
restart: always |
|||
environment: |
|||
- VIRTUAL_HOST=jenkins.mthmmy.tk |
|||
- VIRTUAL_PORT=8080 |
|||
- LETSENCRYPT_HOST=jenkins.mthmmy.tk |
|||
- LETSENCRYPT_EMAIL=apotwohd@gmail.com |
|||
- SONARQUBE_HOST=127.0.0.1:9000 |
|||
- DEFAULT_HOST=mthmmy.tk |
|||
labels: |
|||
com.github.jrcs.letsencrypt_nginx_proxy_companion.nginx_proxy: "true" |
|||
logging: |
|||
options: |
|||
max-size: '4m' |
|||
max-file: '10' |
|||
networks: |
|||
- janus-net |
|||
nginx-proxy: |
|||
image: jwilder/nginx-proxy |
|||
container_name: nginx-proxy |
|||
ports: |
|||
- "80:80" |
|||
- "443:443" |
|||
networks: |
|||
- janus-net |
|||
volumes: |
|||
- /var/run/docker.sock:/tmp/docker.sock:ro |
|||
environment: |
|||
- DEFAULT_HOST=mthmmy.tk |
|||
- conf:/etc/nginx/conf.d |
|||
- vhost:/etc/nginx/vhost.d |
|||
- html:/usr/share/nginx/html |
|||
- dhparam:/etc/nginx/dhparam |
|||
- certs:/etc/nginx/certs:ro |
|||
- ./volumes/nginx/conf:/etc/nginx/conf.d |
|||
- ./volumes/nginx/vhost:/etc/nginx/vhost.d |
|||
- ./volumes/nginx/html:/usr/share/nginx/html |
|||
- ./volumes/nginx/dhparam:/etc/nginx/dhparam |
|||
- ./volumes/nginx/certs:/etc/nginx/certs:ro |
|||
|
|||
# Letsencrypt automated creation, renewal and use of Let's Encrypt certificates |
|||
# Reference: |
|||
# https://github.com/JrCs/docker-letsencrypt-nginx-proxy-companion |
|||
letsencrypt: |
|||
image: jrcs/letsencrypt-nginx-proxy-companion |
|||
container_name: nginx-proxy-le |
|||
restart: always |
|||
depends_on: |
|||
- nginx-proxy |
|||
logging: |
|||
options: |
|||
max-size: '4m' |
|||
max-file: '10' |
|||
networks: |
|||
- janus-net |
|||
volumes: |
|||
- conf:/etc/nginx/conf.d |
|||
- vhost:/etc/nginx/vhost.d |
|||
- html:/usr/share/nginx/html |
|||
- dhparam:/etc/nginx/dhparam |
|||
- certs:/etc/nginx/certs:rw |
|||
- ./volumes/nginx/conf:/etc/nginx/conf.d |
|||
- ./volumes/nginx/vhost:/etc/nginx/vhost.d |
|||
- ./volumes/nginx/html:/usr/share/nginx/html |
|||
- ./volumes/nginx/dhparam:/etc/nginx/dhparam |
|||
- ./volumes/nginx/certs:/etc/nginx/certs:rw |
|||
- /var/run/docker.sock:/var/run/docker.sock:ro |
|||
|
|||
# Jenkins automation server, image bundled with Blue Ocean |
|||
# Reference: |
|||
# https://jenkins.io/doc/book/blueocean/ |
|||
jenkins: |
|||
build: ./jenkins |
|||
container_name: jenkins |
|||
restart: always |
|||
user: root |
|||
environment: |
|||
- NGINX_PROXY_CONTAINER=nginx-proxy |
|||
- VIRTUAL_HOST=jenkins.mthmmy.tk |
|||
- VIRTUAL_PORT=8080 |
|||
- LETSENCRYPT_HOST=jenkins.mthmmy.tk |
|||
- LETSENCRYPT_EMAIL=apotwohd@gmail.com |
|||
- SONARQUBE_HOST=127.0.0.1:9000 |
|||
secrets: |
|||
- jenkins_admin_username |
|||
- jenkins_admin_password |
|||
networks: |
|||
- janus-net |
|||
volumes: |
|||
- ./volumes/jenkins/log:/var/log/jenkins |
|||
- jenkins-data:/var/jenkins_home |
|||
- ./jenkins/downloads:/var/jenkins_home/downloads |
|||
- /var/run/docker.sock:/var/run/docker.sock |
|||
|
|||
# Sonarqube continuous inspection of code quality |
|||
# References: |
|||
# https://docs.sonarqube.org/latest/ |
|||
# https://github.com/SonarSource/docker-sonarqube/tree/master/recipes |
|||
sonarqube: |
|||
image: sonarqube |
|||
container_name: sonarqube |
|||
ports: |
|||
- "9000:9000" |
|||
restart: always |
|||
environment: |
|||
- sonar.jdbc.username=sonar |
|||
- sonar.jdbc.password=sonar |
|||
- sonar.jdbc.url=jdbc:postgresql://sonar-db:5432/sonar |
|||
- VIRTUAL_HOST=sonar.mthmmy.tk |
|||
- VIRTUAL_PORT=9000 |
|||
- LETSENCRYPT_HOST=sonar.mthmmy.tk |
|||
- LETSENCRYPT_EMAIL=apotwohd@gmail.com |
|||
networks: |
|||
- janus-net |
|||
expose: |
|||
- "9000" |
|||
secrets: |
|||
- sonar-net |
|||
volumes: |
|||
- sonarqube_conf:/opt/sonarqube/conf |
|||
- sonarqube_data:/opt/sonarqube/data |
|||
- sonarqube_extensions:/opt/sonarqube/extensions |
|||
- sonarqube_bundled-plugins:/opt/sonarqube/lib/bundled-plugins |
|||
sonar-db: |
|||
image: postgres |
|||
container_name: sonar-db |
|||
restart: always |
|||
environment: # TODO: figure out another way to pass the username and password |
|||
- POSTGRES_USER=sonar |
|||
- POSTGRES_PASSWORD=sonar |
|||
volumes: |
|||
- postgresql:/var/lib/postgresql |
|||
- postgresql_data:/var/lib/postgresql/data |
|||
networks: |
|||
- sonar-net |
|||
|
|||
# Networks in use |
|||
# TODO: maybe add/split to separate networks |
|||
networks: |
|||
janus-net: |
|||
driver: bridge |
|||
sonar-net: |
|||
driver: bridge |
|||
# Secrets in use |
|||
secrets: # TODO: figure out a better way to do this |
|||
jenkins_admin_username: |
|||
file: ./jenkins/user |
|||
jenkins_admin_password: |
|||
file: ./jenkins/pass |
|||
volumes: |
|||
jenkins-data: |
|||
jenkins-log: |
|||
conf: |
|||
vhost: |
|||
html: |
|||
dhparam: |
|||
certs: |
|||
networks: |
|||
janus-net: |
|||
driver: bridge |
|||
sonarqube_conf: |
|||
sonarqube_data: |
|||
sonarqube_extensions: |
|||
sonarqube_bundled-plugins: |
|||
postgresql: |
|||
postgresql_data: |
|||
@ -0,0 +1,44 @@ |
|||
#!/bin/bash |
|||
|
|||
# This script will: |
|||
# - install docker |
|||
# - make temporary changes to your system (vm.max_map_count, fs.file-max and other) |
|||
|
|||
# ATENTION: run this script as root (use sudo if needed)! |
|||
|
|||
# Checks for root privileges |
|||
if [ "$EUID" -ne 0 ] |
|||
then echo "Please run as root." |
|||
exit 1 |
|||
fi |
|||
|
|||
# Checks if ports 80 and 443 are in use |
|||
SHOULD_EXIT=0 |
|||
if [[ `lsof -i -P -n | grep LISTEN | grep '*:80 (LISTEN)'` ]]; then |
|||
PORT80USER=`lsof -i -P -n | grep LISTEN | grep '*:80 (LISTEN)' | awk '{ print $1 }'` |
|||
echo "Port 80 is in use by another program ($PORT80USER). Please free the port and try again." |
|||
SHOULD_EXIT=1 |
|||
fi |
|||
|
|||
if [[ `lsof -i -P -n | grep LISTEN | grep '*:443 (LISTEN)'` ]]; then |
|||
PORT443USER=`lsof -i -P -n | grep LISTEN | grep '*:443 (LISTEN)' | awk '{ print $1 }'` |
|||
echo "Port 443 is in use by another program ($PORT80USER). Please free the port and try again." |
|||
SHOULD_EXIT=1 |
|||
fi |
|||
|
|||
if [[ "$SHOULD_EXIT" = "1" ]]; then |
|||
echo "Exiting..." |
|||
exit 1 |
|||
fi |
|||
|
|||
# Installs docker using the get.docker.com method |
|||
VERSION="18.09" |
|||
curl -fsSL https://get.docker.com -o get-docker.sh | sh |
|||
|
|||
# Bellow settings are needed for Sonarqube to run on linux. |
|||
# These settings are valid only for the session and are lost after reboot |
|||
# TODO: make the changes permanent |
|||
sysctl -w vm.max_map_count=262144 |
|||
sysctl -w fs.file-max=65536 |
|||
ulimit -n 65536 |
|||
ulimit -u 4096 |
|||
@ -0,0 +1,37 @@ |
|||
import jenkins.model.* |
|||
import com.cloudbees.plugins.credentials.* |
|||
import com.cloudbees.plugins.credentials.common.* |
|||
import com.cloudbees.plugins.credentials.domains.* |
|||
import com.cloudbees.plugins.credentials.impl.* |
|||
import com.cloudbees.jenkins.plugins.sshcredentials.impl.* |
|||
import org.jenkinsci.plugins.plaincredentials.* |
|||
import org.jenkinsci.plugins.plaincredentials.impl.* |
|||
import hudson.util.Secret |
|||
import hudson.plugins.sshslaves.* |
|||
import org.apache.commons.fileupload.* |
|||
import org.apache.commons.fileupload.disk.* |
|||
import java.nio.file.Files |
|||
|
|||
def env = System.getenv() |
|||
|
|||
GITHUB_TOKEN = env['GITHUB_TOKEN'] |
|||
|
|||
domain = Domain.global() |
|||
store = Jenkins.instance.getExtensionList('com.cloudbees.plugins.credentials.SystemCredentialsProvider')[0].getStore() |
|||
|
|||
println("== multibranch-github-pipeline.groovy => Starting.") |
|||
if ( GITHUB_TOKEN ) { |
|||
println("== multibranch-github-pipeline.groovy => Adding token.") |
|||
secretText = new StringCredentialsImpl( |
|||
CredentialsScope.GLOBAL, |
|||
"github-token", |
|||
"This is the token used for Github source branch plugin", |
|||
Secret.fromString(GITHUB_TOKEN) |
|||
) |
|||
|
|||
store.addCredentials(domain, secretText) |
|||
println("== multibranch-github-pipeline.groovy => token added.") |
|||
|
|||
} |
|||
|
|||
println("== multibranch-github-pipeline.groovy => Done.") |
|||
@ -0,0 +1,13 @@ |
|||
import jenkins.model.Jenkins |
|||
|
|||
def env = System.getenv() |
|||
|
|||
JENKINS_URL = env['JENKINS_URL'] |
|||
|
|||
if (JENKINS_URL) { |
|||
def location = Jenkins.instance.getDescriptor('jenkins.model.JenkinsLocationConfiguration') |
|||
location.setUrl(JENKINS_URL) |
|||
println("== 00_jenkins-init.groovy - Jenkins URL configured to " + Jenkins.instance.getRootUrl()) |
|||
} else { |
|||
println("== 00_jenkins-init.groovy - Jenkins URL not configured. " + Jenkins.instance.getRootUrl()) |
|||
} |
|||
@ -0,0 +1,4 @@ |
|||
#!/bin/bash |
|||
|
|||
DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" >/dev/null 2>&1 && pwd )" |
|||
docker exec -it jenkins ls /var/jenkins_home/plugins/ | grep -v jpi > "$DIR/../jenkins/plugins.txt" |
|||
Loading…
Reference in new issue