ocaml-ci/stack.yml.in at master · ocurrent/ocaml-ci · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
version: '3.1'
volumes:
  data:
  capnp-secrets:

secrets:
  ocaml-ci-github-key:
    external: true
  ocaml-ci-oauth:
    external: true
  ocaml-ci-submission-cap:
    external: true
  ocaml-ci-webhook-secret:
    external: true
  ocaml-ci-solver-cap:
    external: true

services:
  ci:
    image: ocurrent/ocaml-ci-service:live
    # image: ocaml-ci-service
    # For local deploys using docker -c ocaml.ci.dev build -t ocaml-ci-service -f Dockerfile .
    command: >
      --github-app-id 39151
      --github-private-key-file /run/secrets/ocaml-ci-github-key
      --github-oauth /run/secrets/ocaml-ci-oauth
      --github-webhook-secret-file /run/secrets/ocaml-ci-webhook-secret
      --confirm above-average
      --confirm-auto-release 120
      --capnp-public-address=tcp:ocaml.ci.dev:8102 --capnp-listen-address=tcp:0.0.0.0:9000
      --submission-service /run/secrets/ocaml-ci-submission-cap
      --submission-solver-service /run/secrets/ocaml-ci-solver-cap
      --submission-query-service /run/secrets/ocaml-ci-submission-cap
      --migration-path /migrations
      --verbosity info
      --github-account-allowlist GITHUB_ORGANISATIONS
    environment:
      - "CAPNP_PROFILE=production"
      - "PLATFORMS=all"
      - "DOCKER_BUILDKIT=1"
      - "PROGRESS_NO_TRUNC=1"
    ports:
      - '8102:9000'
    volumes:
      - 'data:/var/lib/ocurrent'
      - '/var/run/docker.sock:/var/run/docker.sock'
      - 'capnp-secrets:/capnp-secrets'
    secrets:
      - 'ocaml-ci-oauth'
      - 'ocaml-ci-github-key'
      - 'ocaml-ci-submission-cap'
      - 'ocaml-ci-solver-cap'
      - 'ocaml-ci-webhook-secret'
    sysctls:
      - 'net.ipv4.tcp_keepalive_time=60'

  web:
    image: ocurrent/ocaml-ci-web:live
    # image: ocaml-ci-web
    # For local deploys using docker -c ocaml.ci.dev build -t ocaml-ci-web -f Dockerfile.web .
    command: >
      --backend /capnp-secrets/ocaml-ci-admin.cap
      --listen-prometheus=9090
    volumes:
      - 'capnp-secrets:/capnp-secrets:ro'
    sysctls:
      - 'net.ipv4.tcp_keepalive_time=60'