feat: add more services
This commit is contained in:
75
src/jenkins/README.md
Normal file
75
src/jenkins/README.md
Normal file
@@ -0,0 +1,75 @@
|
||||
# Jenkins
|
||||
|
||||
[English](./README.md) | [中文](./README.zh.md)
|
||||
|
||||
This service deploys Jenkins, an open-source automation server for CI/CD pipelines.
|
||||
|
||||
## Services
|
||||
|
||||
- `jenkins`: The Jenkins automation server.
|
||||
|
||||
## Environment Variables
|
||||
|
||||
| Variable Name | Description | Default Value |
|
||||
| --------------------------- | ------------------------------------------------- | ----------------------------------------------- |
|
||||
| JENKINS_VERSION | Jenkins image version | `2.486-lts-jdk17` |
|
||||
| JENKINS_HTTP_PORT_OVERRIDE | Host port mapping for HTTP (maps to port 8080) | 8080 |
|
||||
| JENKINS_AGENT_PORT_OVERRIDE | Host port mapping for agents (maps to port 50000) | 50000 |
|
||||
| JENKINS_OPTS | Additional Jenkins options | `--httpPort=8080` |
|
||||
| JAVA_OPTS | Java JVM options | `-Djenkins.install.runSetupWizard=false -Xmx2g` |
|
||||
| CASC_JENKINS_CONFIG | Configuration as Code directory | `/var/jenkins_home/casc_configs` |
|
||||
| JENKINS_USER_ID | User ID for Jenkins process | 1000 |
|
||||
| JENKINS_GROUP_ID | Group ID for Jenkins process | 1000 |
|
||||
|
||||
Please modify the `.env` file as needed for your use case.
|
||||
|
||||
## Volumes
|
||||
|
||||
- `jenkins_home`: A volume for storing Jenkins data, configuration, and workspace.
|
||||
- `/var/run/docker.sock`: Docker socket (read-only) for Docker-in-Docker functionality.
|
||||
- `./jenkins.yaml`: Optional Configuration as Code file.
|
||||
|
||||
## Initial Setup
|
||||
|
||||
1. Start the service:
|
||||
|
||||
```bash
|
||||
docker compose up -d
|
||||
```
|
||||
|
||||
2. Get the initial admin password:
|
||||
|
||||
```bash
|
||||
docker exec jenkins cat /var/jenkins_home/secrets/initialAdminPassword
|
||||
```
|
||||
|
||||
3. Access Jenkins at `http://localhost:8080` and complete the setup wizard.
|
||||
|
||||
## Configuration as Code
|
||||
|
||||
Jenkins can be configured using Configuration as Code (JCasC). Create a `jenkins.yaml` file with your configuration and mount it to `/var/jenkins_home/casc_configs/jenkins.yaml`.
|
||||
|
||||
Example configuration:
|
||||
```yaml
|
||||
jenkins:
|
||||
systemMessage: "Jenkins configured automatically by Jenkins Configuration as Code plugin"
|
||||
|
||||
securityRealm:
|
||||
local:
|
||||
allowsSignup: false
|
||||
users:
|
||||
- id: admin
|
||||
password: admin123
|
||||
|
||||
authorizationStrategy:
|
||||
loggedInUsersCanDoAnything:
|
||||
allowAnonymousRead: false
|
||||
```
|
||||
|
||||
## Security Notes
|
||||
|
||||
- Change the default admin password immediately after setup
|
||||
- Consider using HTTPS for production deployments
|
||||
- Regularly update Jenkins and its plugins for security patches
|
||||
- Use proper authentication and authorization strategies
|
||||
- Restrict access to the Jenkins web interface
|
||||
48
src/jenkins/docker-compose.yaml
Normal file
48
src/jenkins/docker-compose.yaml
Normal file
@@ -0,0 +1,48 @@
|
||||
x-default: &default
|
||||
restart: unless-stopped
|
||||
volumes:
|
||||
- &localtime /etc/localtime:/etc/localtime:ro
|
||||
- &timezone /etc/timezone:/etc/timezone:ro
|
||||
logging:
|
||||
driver: json-file
|
||||
options:
|
||||
max-size: 100m
|
||||
|
||||
services:
|
||||
jenkins:
|
||||
<<: *default
|
||||
image: jenkins/jenkins:${JENKINS_VERSION:-2.486-lts-jdk17}
|
||||
container_name: jenkins
|
||||
ports:
|
||||
- "${JENKINS_HTTP_PORT_OVERRIDE:-8080}:8080"
|
||||
- "${JENKINS_AGENT_PORT_OVERRIDE:-50000}:50000"
|
||||
volumes:
|
||||
- *localtime
|
||||
- *timezone
|
||||
- jenkins_home:/var/jenkins_home
|
||||
- /var/run/docker.sock:/var/run/docker.sock:ro
|
||||
|
||||
# Custom configuration
|
||||
# - ./jenkins.yaml:/var/jenkins_home/casc_configs/jenkins.yaml:ro
|
||||
environment:
|
||||
- JENKINS_OPTS=${JENKINS_OPTS:---httpPort=8080}
|
||||
- JAVA_OPTS=${JAVA_OPTS:--Djenkins.install.runSetupWizard=false -Xmx2g}
|
||||
- CASC_JENKINS_CONFIG=${CASC_JENKINS_CONFIG:-/var/jenkins_home/casc_configs}
|
||||
user: "${JENKINS_USER_ID:-1000}:${JENKINS_GROUP_ID:-1000}"
|
||||
deploy:
|
||||
resources:
|
||||
limits:
|
||||
cpus: '2.00'
|
||||
memory: 3G
|
||||
reservations:
|
||||
cpus: '0.50'
|
||||
memory: 1G
|
||||
healthcheck:
|
||||
test: ["CMD-SHELL", "curl -f http://localhost:8080/login || exit 1"]
|
||||
interval: 30s
|
||||
timeout: 10s
|
||||
retries: 5
|
||||
start_period: 120s
|
||||
|
||||
volumes:
|
||||
jenkins_home:
|
||||
Reference in New Issue
Block a user